roybabayov@gmail.com has uploaded this change for review.

View Change

add root_kerberos_principal param

Add root_kerberos_principal under directory_services_param to
control which hosts users/service name parts of the principal
should be assigned root privilege.
The default value is all (currently nfs,root,host) to keep the
existing behavior by default.

This config will allow to opt out of setting root privilege to
specific principals when server consider it a security issue.

Change-Id: Ie174efd9004d62754122244a9d82ddc254b9b68e
Signed-off-by: Roy Babayov <roybabayov@google.com>
---
M src/doc/man/ganesha-core-config.rst
M src/idmapper/idmapper.c
M src/include/gsh_config.h
M src/support/nfs_read_conf.c
4 files changed, 81 insertions(+), 11 deletions(-)

git pull ssh://review.gerrithub.io:29418/ffilz/nfs-ganesha refs/changes/10/1206910/1

To view, visit change 1206910. To unsubscribe, or for help writing mail filters, visit settings.

Gerrit-MessageType: newchange
Gerrit-Project: ffilz/nfs-ganesha
Gerrit-Branch: next
Gerrit-Change-Id: Ie174efd9004d62754122244a9d82ddc254b9b68e
Gerrit-Change-Number: 1206910
Gerrit-PatchSet: 1
Gerrit-Owner: roybabayov@gmail.com