Re: GSSPROXY ( for NFS with sec=krb5, krb5i , krb5p ) is development still active or is it being depreciated

[Scott Mayhew <smayhew@redhat.com>]

On Fri, 14 Mar 2025, Benjamin Coddington wrote:

> On 13 Mar 2025, at 7:30, Andrew J. Romero wrote:
> 
> > Hi
> >
> > Alexander Bokovoy provided excellent answers to most of my questions on
> > this topic See: Thread: gssproxy  security, configuration and life-cycle
> > questions on gss-proxy@lists.fedorahosted.org
> >
> > Remaining question:
> >
> > Prior to RHEL-9 , in the section of the gssd man page ( under the heading
> > CONFIGURATION FILE ...  ....options  that  can be set on the command line
> > can also be controlled through .... values set in the [gssd] section of
> > /etc/nfs.conf ) there was a configuration parameter "use-gss-proxy"
> 
> I don't see any git history of gssd.man with use-gss-proxy, but the value
> does appear in nfs.conf.man.  It has not been removed there.  It probably
> should be added to gssd.man.

I also looked at the repos we use to build the RHEL packages, and I
don't see any evidence that we ever shipped a RHEL-only patch that would
have documented use-gss-proxy in gssd.man.

Andrew - can you provide a specific RHEL package version where you saw this
documented in gssd.man (on the off change I missed something)?

Either way, I agree this should be documented.

-Scott
> 
> > why was this parameter removed from the current man page, can it be
> > re-added ?  ( apparently the parameter is still functional ... if that's
> > the case , it should not simply be removed from the documentation with no
> > commentary )
> 
> I'm not sure thats what happened.  It looks like it wasn't ever in gssd.man
> to me.  Maybe Steve D can clarify?
> 
> Ben
> 
>