On Fri, 13 Aug 2010 10:43:06 -0400 Steve Dickson <SteveD@xxxxxxxxxx> wrote: > > > On 08/11/2010 07:22 PM, Neil Brown wrote: > > > > I agree. And surely it can all be solved in idmapd. > > > > On the server, tell idmapd to map all users to "NUMERIC_USER:%d" and all > > groups to "NUMERIC_GROUP:%d" (or whatever) for some given clients (i.e. stop > > ignoring the 'authentication name'. And of course map those names back to > > numbers. > > > > I don't know if the client can easily differentiate based on which server it > > is talking to, but there is probably less need there (and maybe it can > > anyway). > > > > It shouldn't take more that half an hour to hack something into > > idmapd.c:nfsdcb() for the server side and nfscb for the client side - or > > for a quicker hack, just go directly to imconv and ignore the client name on > > the server. (all this in nfs-utils of course). > I took a look... and you are right it would not be that difficult to > hack something up... but would this only be a Linux to Linux thing? > Or am I missing something? > > steved. Yes, I was thinking only Linux to Linux. But if it works, is well designed, and if there is a customer demand, then one can expect it to spread (which I think is a much better way of creating standards than the IETF process..) NeilBrown -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
