Currently the RPC client is able to dynamically load GSS security
flavor support by name or pseudoflavor number, but not by
[OID, qop, service] tuple. Such a tuple can be provided by an NFSv4
server in a SECINFO reply, for example.
This means that if an NFSv4 server lists a tuple for, say, krb5p, in
a SECINFO reply, our client will pretend it doesn't support krb5p if
the rpc-auth-gss-krb5 module is available on the system but does not
happen to be loaded at that moment.
This series implements support for loading the correct GSS
pseudoflavor module before searching by GSS tuple.
This version of the series seems ready for linux-next or 3.9.
Changes since v2:
1. Some polish
2. Server-side [9/9] rewritten based on testing results
Changes since v1:
1. Simplify function and method names
2. Add an equivalent server-side interface
3. Improve automatic loading of the auth_rpcgss module
4. nfs_find_best_sec() also verifies non-GSS flavors against
RPC client's list of registered flavors
5. Search for (qop, svc) pair without adding a new function
6. Clean up GSS mech switch
7. Remove dprintk() calls
8. Improve patch descriptions
9. Numerous small improvements and fixes
---
Chuck Lever (9):
SUNRPC: Remove EXPORT_SYMBOL_GPL() from GSS mech switch
SUNRPC: Make gss_mech_get() static
SUNRPC: Refactor nfsd4_do_encode_secinfo()
SUNRPC: Consider qop when looking up pseudoflavors
SUNRPC: Load GSS kernel module by OID
SUNRPC: Introduce rpcauth_get_pseudoflavor()
SUNRPC: Define rpcsec_gss_info structure
NFS: Remove unneeded forward declaration
SUNRPC: Missing module alias for auth_rpcgss.ko
fs/nfs/nfs4namespace.c | 43 +++++++-----
fs/nfs/nfs4xdr.c | 20 +++---
fs/nfsd/nfs4xdr.c | 24 +++----
include/linux/nfs_xdr.h | 24 +------
include/linux/sunrpc/auth.h | 6 ++
include/linux/sunrpc/gss_api.h | 29 ++++++--
net/sunrpc/Kconfig | 1
net/sunrpc/auth.c | 68 +++++++++++++++++++
net/sunrpc/auth_gss/auth_gss.c | 3 +
net/sunrpc/auth_gss/gss_krb5_mech.c | 6 +-
net/sunrpc/auth_gss/gss_mech_switch.c | 117 +++++++++++++++++++++++++--------
net/sunrpc/auth_gss/svcauth_gss.c | 4 +
12 files changed, 245 insertions(+), 100 deletions(-)
--
Chuck Lever
--
To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
