2007-11-21 11:33:36

by Harshula

[permalink] [raw]
Subject: Re: [NFS] libnfsidmap

On Thu, 2007-11-15 at 09:12 -0500, Kevin Coffman wrote:
> On Nov 15, 2007 5:29 AM, Harshula <[email protected]> wrote:

> > In practise, what are the "other cases" where a failed
> > nfs4_gss_princ_to_ids() lookup needs to be mapped to 'nobody'?
>
> You have cross-realm Kerberos trusts set up. A user from a different
> Kerberos realm comes to your server and you have no local mapping for
> that user.

Can the KDCs be setup to handle this case?

> A new local user is created, but has not yet been placed in the mappings.

This case should fail.

cya,
#


-------------------------------------------------------------------------
This SF.net email is sponsored by: Microsoft
Defy all challenges. Microsoft(R) Visual Studio 2005.
http://clk.atdmt.com/MRT/go/vse0120000070mrt/direct/01/
_______________________________________________
NFS maillist - [email protected]
https://lists.sourceforge.net/lists/listinfo/nfs
_______________________________________________
Please note that [email protected] is being discontinued.
Please subscribe to [email protected] instead.
http://vger.kernel.org/vger-lists.html#linux-nfs