Re: mount.nfs: access denied by server

[Tom Haynes <Thomas.Haynes-UdXhSnd/wVw@public.gmane.org>]

J. Bruce Fields wrote:
>
>> Right now, we use AUTH_SYS if the mount command didn't specify a flavor, 
>> but the flavor we're going to use is always checked against the server's 
>> returned list.  You seem to be suggesting we should ignore the server's 
>> list entirely if sec= was specified...?
>>     
>
> Yes.  I can't see what practical problems that would cause.
>
> Also, while I hope this is the last bug in the mountd's flavor list
> return, it isn't the first--only recently did we even start using real
> information from the export instead of just faking something up.  So I
> think it's safest to preserve the historical sec= behavior and give
> users a way to override the negotiation, to cut down on bug reports of
> mount failures on upgrade.
>
> --b.
>   


While this Linux behavior occasionally bites the OpenSolaris behavior, it
really means we just have to guard against the client ignoring what we sent.
I.e., if I say we only support krb5 and you try with AUTH_SYS, I should
reject it.

Historical inertia is hard to overcome, but perhaps you could gradually
ease your way into using the real data. :->