Skip to content

Add secinfo to the NFS client

Bryan Schumaker linux-nfs 2 versions – In review

Get series with b4
b4 am [email protected]

Versions newest first · linked by author and title

  1. v4 Latest5 patches 1 replyIn review
  2. v25 patches 5 repliesSuperseded

Changes in v4 from the cover letter

- Properly set the number of security flavors decoded by the client
- Return an int rather than an rpc_authflavor_t for better error checking

Patches in v4 No applies recorded yet

#Subject and filesSizeRepliesApplied
1/5NFS: convert call_sync() to a functionfs/nfs/nfs4proc.c+30 -230 replies
2/5NFS: lookup supports alternate clientfs/nfs/dir.c fs/nfs/internal.h fs/nfs/namespace.c +5 more+60 -480 replies
3/5NFS: Add secinfo procedurefs/nfs/nfs4proc.c fs/nfs/nfs4xdr.c include/linux/nfs4.h +1 more+209 -01 reply
4/5NFS: use secinfo when crossing mountpointsfs/nfs/inode.c fs/nfs/internal.h fs/nfs/namespace.c +4 more+154 -110 replies
5/5NFS: Determine initial mount securityfs/nfs/nfs4proc.c include/linux/sunrpc/gss_api.h net/sunrpc/auth_gss/gss_mech_switch.c+50 -20 replies

Reviews trailers per patch

No Reviewed-by, Acked-by or Tested-by trailers for v4 yet.

Read the v4 thread

Cover letter [PATCH v4 0/5] Add secinfo to the NFS client

These patches will add the secinfo procedure to the NFS client and do some cleanup along the way. The final result will should be able to cross mountpoints using a different form of security and auto-detect the security of an initial NFS v4 mount.

v4:
- Properly set the number of security flavors decoded by the client
- Return an int rather than an rpc_authflavor_t for better error checking
v3:
- Check for server returning too many security flavors
- Check for gss_oid_len > max_gss_oid_len
- New functions in namespace.c should be static

v2:
- Add more details about the call_sync improvement
- Don't initialize global constant function pointers to NULL

Bryan