On Tue, 13 Oct 2009 13:31:38 -0400 Jeff Layton <jlayton@xxxxxxxxxx> wrote: > On Tue, 13 Oct 2009 08:59:29 -0700 > raini@xxxxxxxxxxxx wrote: > > > > > > You and Kevin are correct. rpc.gssd only looks at the mtime. When I did > > > the work to allow the CIFS SPNGEO upcall to find alternate credcaches, > > > I implemented the behavior I described (prefer the latest TGT > > > expiration) -- sorry for the confusion... > > > > > > It probably wouldn't be too hard to change rpc.gssd to prefer > > > credcaches with the latest TGT expiration if it was considered a > > > desirable change. > > > > > > Kevin, any thoughts? > > > > This would be a big plus from me - I still wouldn't be able to create > > per-job ccaches of course, but if a user who knew they needed to run a job > > could create a long lifetime renewable ticket in /tmp/krb5cc_<uid>_batch, > > say, and NFS would use this in preference to a later login ticket, this > > would really help. > > > > > > Ok, here's a proposed patch...only compile-tested so far. I don't have > time at the moment to test it more extensively so if you could test it > out and report back, that would be helpful. > Looks like this patch will probably break the "preferred realm" code. It'll have to be respun to fix that, but it should work as expected in a single-realm environment. -- Jeff Layton <jlayton@xxxxxxxxxx> -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
