Re: [PATCH nfs-utils/systemd] systemd: convert secure services to start without explicit configuration.

[NeilBrown <neilb@suse.de>]

[-- Attachment #1: Type: text/plain, Size: 1234 bytes --]

On Thu, 13 Feb 2014 14:42:15 -0500 Steve Dickson <SteveD@redhat.com> wrote:

> 
> 
> On 02/04/2014 10:18 PM, NeilBrown wrote:
> > 
> > 
> > This patch removes nfs-secure.target.
> > Instead, rpc.gssd and rpc.svcgssd start started if they appear to be needed.
> > 
> > For rpc.gssd, this means if the file /etc/krb5.keytab exists.
> > As the only security mechanism supported is krb5, that file must exist
> > for rpc.gssd to be useful.  Conversely, if it does exist, it seems very
> > likely that krb5 is configured on the system an may be used for NFS.
> > 
> > For rpc.svcgssd, it also means checking if gss-proxy might be performing
> > the equivalent task instead.  So we check if it is running, and if the kernel
> > is able to talk to it.
> > 
> > Signed-off-by: NeilBrown <neilb@suse.de>
> Committed to the systemd branch of my git tree...
> 
> I would like to more testing before I move them on
> to the master branch...

Thanks Steve.  And I totally agree with more testing, and also more
development, tidying up, documentation, and integration with "make install".
This is still a WIP and doesn't belong on master yet.

I'll be sending more patches over the coming weeks.

Thanks,
NeilBrown

[-- Attachment #2: signature.asc --]
[-- Type: application/pgp-signature, Size: 828 bytes --]