Re: gssapi and nfs4

["J. Bruce Fields" <bfields@fieldses.org>]

On Wed, Nov 05, 2008 at 02:18:54PM -0500, Brian J. Murrell wrote:
> On Wed, 2008-11-05 at 14:02 -0500, J. Bruce Fields wrote:
> > > It's important to be able to do because I might
> > > want to be able to export /d to certain hosts without giving them access
> > > to mountpoints within /d as I have done above with /d/sub and pc.  If I
> > > use crossmnt which my experience is showing I need, then /d/sub is
> > > exposed to all of 10.75.22.0/24 which is not what I want.
> > 
> > If you add a separate export for /d/sub, I think it should override that
> > behavior.
> 
> That's what I did and still, I have to use crossmnt on /d and that
> exposes /d/sub it to everyone who gets access to /d where my intention
> is to only expose /d/sub to the match/limit I put on /d/sub, which is
> the single host "pc" in my above scneario.

That sounds like a bug we should fix; I can't volunteer to do it
currently, though.

--b.