* about group membership
@ 2004-05-11 17:12 MeiJia
2004-05-11 18:22 ` Olaf Kirch
0 siblings, 1 reply; 2+ messages in thread
From: MeiJia @ 2004-05-11 17:12 UTC (permalink / raw)
To: NFS-devel
Hi developers,
While i'm looking at the NFS (include v4), I didn't find any code which
handle supplement group membership issues. so I'm curious how could NFS
deal with following situations, or what's the plan to support:
- normal supplement groups
- setuid binaries
- setgroups binaries
Thanks!
MeiJia
-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver
higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
NFS maillist - NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs
^ permalink raw reply [flat|nested] 2+ messages in thread
* Re: about group membership
2004-05-11 17:12 about group membership MeiJia
@ 2004-05-11 18:22 ` Olaf Kirch
0 siblings, 0 replies; 2+ messages in thread
From: Olaf Kirch @ 2004-05-11 18:22 UTC (permalink / raw)
To: MeiJia; +Cc: NFS-devel
On Tue, May 11, 2004 at 11:12:41AM -0600, MeiJia wrote:
> While i'm looking at the NFS (include v4), I didn't find any code which
> handle supplement group membership issues. so I'm curious how could NFS
> deal with following situations, or what's the plan to support:
> - normal supplement groups
Supplementary groups are transported in the AUTH_UNIX credentials.
If you you use a different authentication flavor, supplementary
groups are usually retrieved from the password database.
> - setuid binaries
Linux nfs normally uses the effective uid in any requests
(if credentials are available; which is not a given for all
auth flavors).
There is an option to fall back to the real uid in certain cases,
but that is really more of a hack.
> - setgroups binaries
I think we just add the effective uid to the groups vector,
if it is different from the rgid.
Olaf
--
Olaf Kirch | The Hardware Gods hate me.
okir@suse.de |
---------------+
-------------------------------------------------------
This SF.Net email is sponsored by Sleepycat Software
Learn developer strategies Cisco, Motorola, Ericsson & Lucent use to deliver
higher performing products faster, at low TCO.
http://www.sleepycat.com/telcomwpreg.php?From=osdnemail3
_______________________________________________
NFS maillist - NFS@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/nfs
^ permalink raw reply [flat|nested] 2+ messages in thread
end of thread, other threads:[~2004-05-11 18:22 UTC | newest]
Thread overview: 2+ messages (download: mbox.gz follow: Atom feed
-- links below jump to the message on this page --
2004-05-11 17:12 about group membership MeiJia
2004-05-11 18:22 ` Olaf Kirch
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.