On 02/18/2014 02:36 PM, Chuck Lever wrote: >> At this point its a pipe dream for rpc.gssd to run with no keytab. > This is not a pipe dream. I meant its a pipe dream in the current state due to, your nicely termed, "gssd log diarrhea" ;-) steved. > I’m talking about the common use case where a user kinit’s as root then uses the “-n” option on gssd so that root’s credential is used as the client’s machine credential, instead of using the keytab to establish a GSS context. > > With the exception of kernels 3.9 - 3.12, this has always worked, does require gssd to be running, and does not need to have a keytab on the client to operate correctly. When 3.9 broke this feature, people (including NeilB!) complained loudly. > >> > It logs a ton of errors messages on every upcall which means >> > on every mount these days. >> > We either have to tone down the error messages or check for the >> > existence of the keytab before processing the upcall. >> > I think the latter would better… > gssd default verbosity is a legacy of the days when Kerberized NFS was new and we wanted verbose logging to monitor gssd activity. It seems like a harmless step forward to eliminate them or hide some or all of them behind a gssd command line option. > > The bug here is gssd log diarrhea. -- To unsubscribe from this list: send the line "unsubscribe linux-nfs" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html
