d/freebsd-dev
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

RELNOTES: Add entries for two new NFS features

Browse Source
This commit is contained in:
Rick Macklem 2023-04-16 12:34:52 -07:00
parent 4819e5aeda
commit 89d197cc99
1 changed files with 20 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

20
RELNOTES
View File

@ -10,6 +10,26 @@ newline. Entries should be separated by a newline.
Changes to this file should not be MFCed. Changes to this file should not be MFCed.
896516e54a8c
Add a new "syskrb5" mount option for Kerberized NFSv4.1/4.2 mounts.
Without this patch, a Kerberized NFSv4.1/4.2 mount must provide
a Kerberos credential for the client at mount time.
This patch uses a feature of NFSv4.1/4.2 called SP4_NONE, which
allows the state maintenance operations to be performed by any
authentication mechanism, so that these operations may be done via
AUTH_SYS instead of RPCSEC_GSS (KerberosV). As such, no Kerberos
credential is required at mount time.
See mount_nfs(8).
330aa8acdec7,ff2f1f691cdb
Adds support for the SP4_MACH_CRED case for the
NFSv4.1/4.2 ExchangeID operation since the Linux
NFSv4.1/4.2 client is now using this for Kerberized mounts.
This change should only affect Kerberized NFSv4.1/4.2 mounts.
The Linux Kerberized NFSv4.1/4.2 mounts currently work without
support for this because Linux will fall back to SP4_NONE,
but there is no guarantee this fallback will work forever.
7344856e3a6d and many others: 7344856e3a6d and many others:
Add support so that nfsd(8), nfsuserd(8), mountd(8), gssd(8) Add support so that nfsd(8), nfsuserd(8), mountd(8), gssd(8)
and rpc.tlsservd(8) can be run in an appropriately configured and rpc.tlsservd(8) can be run in an appropriately configured