From: Per Olofsson <pelle@dsv.su.se>
Subject: Re: NFSv3+Krb5 and mountd
Date: Mon, 30 Aug 2004 23:25:33 +0200
Sender: nfs-admin@lists.sourceforge.net
Message-ID: <20040830212533.GN3671@nasse>
References: <20040824184138.GB3251@nasse> <Pine.LNX.4.61.0408300238530.2441@fogarty.jakma.org> <20040830020132.GA28919@fieldses.org> <20040830154541.GA3671@nasse> <1093884302.8729.21.camel@lade.trondhjem.org>
Mime-Version: 1.0
Content-Type: text/plain; charset=us-ascii
Cc: "J. Bruce Fields" <bfields@fieldses.org>, Paul Jakma <paul@clubi.ie>,
	nfs@lists.sourceforge.net
Return-path: <nfs-admin@lists.sourceforge.net>
Received: from sc8-sf-mx2-b.sourceforge.net ([10.3.1.12] helo=sc8-sf-mx2.sourceforge.net)
	by sc8-sf-list2.sourceforge.net with esmtp (Exim 4.30)
	id 1C1tep-0002Se-G6
	for nfs@lists.sourceforge.net; Mon, 30 Aug 2004 14:25:43 -0700
Received: from amsfep12-int.chello.nl ([213.46.243.18] helo=amsfep20-int.chello.nl)
	by sc8-sf-mx2.sourceforge.net with esmtp (Exim 4.34)
	id 1C1tem-0006AT-Iv
	for nfs@lists.sourceforge.net; Mon, 30 Aug 2004 14:25:41 -0700
To: Trond Myklebust <trond.myklebust@fys.uio.no>
In-Reply-To: <1093884302.8729.21.camel@lade.trondhjem.org>
Errors-To: nfs-admin@lists.sourceforge.net
List-Unsubscribe: <https://lists.sourceforge.net/lists/listinfo/nfs>,
	<mailto:nfs-request@lists.sourceforge.net?subject=unsubscribe>
List-Id: Discussion of NFS under Linux development,
	interoperability,
	and testing. <nfs.lists.sourceforge.net>
List-Post: <mailto:nfs@lists.sourceforge.net>
List-Help: <mailto:nfs-request@lists.sourceforge.net?subject=help>
List-Subscribe: <https://lists.sourceforge.net/lists/listinfo/nfs>,
	<mailto:nfs-request@lists.sourceforge.net?subject=subscribe>
List-Archive: <http://sourceforge.net/mailarchive/forum.php?forum=nfs>

Trond Myklebust:
> This is already implemented...
> 
> The RPCSEC_GSS implementation that is in linux-2.6.x already follows the
> guidelines in RFC2623 when you mount an NFSv2 or v3 partition. (The same
> RFC also includes a brief discussion of the security implications of
> this model.)
> 
> You'll need a patched version of "mount" though. The one distributed as
> part of Fedora Core 2 should work...

I looked through the FC2 util-linux patches and they seem to be mostly
identical to the CITI patches regarding the Kerberos support. And I've
already applied the CITI patches.

-- 
Pelle


-------------------------------------------------------
This SF.Net email is sponsored by BEA Weblogic Workshop
FREE Java Enterprise J2EE developer tools!
Get your free copy of BEA WebLogic Workshop 8.1 today.
http://ads.osdn.com/?ad_id=5047&alloc_id=10808&op=click
_______________________________________________
NFS maillist  -  NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs