FS#8486 - [nfs-utils] NFSv4 utils: idmapd + gss init script, gssd
Attached to Project:
Arch Linux
Opened by Anonymous (abelstern) - Friday, 02 November 2007, 16:21 GMT
Last edited by Tobias Powalowski (tpowa) - Monday, 15 June 2009, 20:19 GMT
Opened by Anonymous (abelstern) - Friday, 02 November 2007, 16:21 GMT
Last edited by Tobias Powalowski (tpowa) - Monday, 15 June 2009, 20:19 GMT
|
Details
Currently Arch doesn't support NFSv4, and because of it's
advantages over NFSv3 (secure auth, speed, for two) it seems
a good idea to support it. Doing this is quite easy: the
only thing Arch lacks is autostarted rpc.idmapd and rpc.gssd
daemons.
The rpc.gssd is not compiled in nfs-utils and can easily added by deleting the --disable-gss flag in the PKGBUILD. The rpc.idmapd needs a default /etc/idmapd.conf. Both gssd and idmapd need an init script like Debian's nfs-common script, maybe controlled by some conf.d to be able to disable them (as an NFSv3 user doesn't need either of the daemons). (Personal NFSv4 support init script attached) (Quite generic /etc/idmapd.conf attached) |
Closed by Tobias Powalowski (tpowa)
Monday, 15 June 2009, 20:19 GMT
Reason for closing: Implemented
Additional comments about closing: nfs-utils 1.2.0-1
Monday, 15 June 2009, 20:19 GMT
Reason for closing: Implemented
Additional comments about closing: nfs-utils 1.2.0-1
I will to upload the needed packages to AUR, add the init scripts and a patch for the netfs init script (nfs4 is not in the list of mounted FSes) and add a howto on the wiki.
I compiled:
libgssglue, libgssapi, librpcsecgss and nfs-utils with --enable-gss.
When the work is done, I'll comment here again.
I found a way to compile nfs-utils by including this lines in the PKGBUILD first after 'build() {':
export GSSAPI_CFLAGS='-I/usr/include/gssglue'
export GSSAPI_LIBS='-lgssapi -ldl'
The problem is that the heimdal package has the libs and the gssapi.h but no pkgconfig file for it.
I included an /etc/rc.d/nfs4-common init script in nfs4-utils starting the idmap and gss daemons.
I filed a bug for the netfs init script, for nfs4 is not in the list of automounted filesystems there.
A very minimal HOWTO is now on the wiki: http://wiki.archlinux.org/index.php/NFSv4.
To be continued.
The wiki is improved as are the packages on AUR. Attila, would you be willing to test it?
It might even be a good idea to just add those features to nfs-utils: the nfs4-common init script, the /etc/idmapd.conf, the /etc/gssapi_mech.conf (from http://aur.archlinux.org/packages.php?do_Details=1&ID=13625) and rpc.gssd (with two additional dependencies, though:
libgssglue (http://aur.archlinux.org/packages.php?do_Details=1&ID=13629) and
librpcsecgss (http://aur.archlinux.org/packages.php?do_Details=1&ID=13630).
(And as the GSSAPI provided by heimdal includes no pkg-config entries, either those need to be added, or something similar to
export GSSAPI_CFLAGS='-I/usr/include/gssapi'
export GSSAPI_LIBS='-lgssapi -ldl'
to the PKGBUILD in order for nfs-utils to compile with GSS).
It seems rational to add NFSv4 support to ArchLinux by default, because of the advantages NFSv4 has over NFSv3: strong authentication and integrity via Kerberos and SPKM-3, improved performance, safe file caching, lock migration, ACLs and better support for Windows file sharing semantics.