Re-negotiating security flavor between nfs client and server (Ganesha) in nfsv4.1
by Dipit Grover
Scenario:
Let's say that there are some nfs clients that negotiate rpcsec_gss security with the nfs v4.1 server (Ganesha). The subsequent nfs-requests from those clients work using rpcsec_gss based authentication. At a later point in time, the server's state changes and it cannot accept rpcsec_gss security. By this I mean that ntirpc is no longer able to authenticate rpcsec_gss requests. The export ACLs may allow or disallow such requests using krb5* security, but since the authentication happens before the export ACLs check is done, the requests will anyways fail for mounted clients.
In such a scenario, what is the best way for server to tell the client to re-negotiate the security flavor (say, downgrade to auth-sys) and perform further requests using that?
1 year, 4 months
Announce Push of V5.5
by Frank Filz
Branch next
Tag:V5.5
This merge includes an MDCACHE LRU change that hopefully averts a crash.
Also includes another crash fix and a data integrity fix.
Please update to this release from any previous V5.x as soon as possible.
Merge Highlights
* Add config param to disable NLM4PROC_SHARE and NLM4PROC_UNSHARE
* Add config param Cache_FDs and use it in the same way as in ibm2.5 code
* MDCACHE: change entry LRU unref to use PTHREAD_MUTEX_dec_int32_t_and_lock
* Validate client_record before using it.
* Fixing data integrity issue found during performance test.
* Fixed crash during readdir of PSEUDO folder.
Signed-off-by: Frank S. Filz <ffilzlnx(a)mindspring.com>
Contents:
37d5ae6b1 Frank S. Filz V5.5
9ba3fd15f Kaleb S. KEITHLEY revert IBM-specific winbind magic
b9df6a94f Gaurav Sharma Fixed crash during readdir of PSEUDO folder.
a47e91a86 Gaurav Sharma Fixing data integrity issue found during performance
test.
0ae32a146 Malahal Naineni Validate client_record before using it.
d691d8218 Frank S. Filz MDCACHE: change entry LRU unref to use
PTHREAD_MUTEX_dec_int32_t_and_lock
7180f8160 Frank S. Filz Add config param Cache_FDs and use it in the same
way as in ibm2.5 code
71bcc2148 Malahal Naineni Add config param to disable NLM4PROC_SHARE and
NLM4PROC_UNSHARE
1 year, 4 months