Re: nfsv3 gssapi client?

[George Mamalakis <mamalos@eng.auth.gr>]

  Hi guys,

Kevin:
As stated in my first email, the linux box is running on a 2.6.35 
kernel, heimdal 1.3.3-1 (the version was not mentioned in my email),  
rpcbind-0.2.0-2, nfs-utils-1.2.2-3, and the distro is arch-linux.

Bruce: I would rather find an "easier" (configuration-specific) way to 
overcome my problem instead of delving into the code, since I am not a 
developer (I am an admin :)). Nevertheless, when I used 
google.com/searchcode for _gss_get_mechanism_cred I found that there is 
a libgss/g_glue.c that defines this function in the following way (the 
site is svn://svn.genunix.org/on/trunk 
<http://google.com/codesearch/p?hl=en#m0BoFGhUuEY/&q=_gss_get_mechanism_cred>):

/*
  * Glue routine for returning the mechanism-specific credential from a
  * external union credential.
  */
gss_cred_id_t
__gss_get_mechanism_cred(union_cred, mech_type)
         const  gss_union_cred_t  union_cred;
         const  gss_OID           mech_type;
{
         int                      i;

         if  (union_cred == (gss_union_cred_t)GSS_C_NO_CREDENTIAL)
                 return  (GSS_C_NO_CREDENTIAL);

         for  (i =0; i<  union_cred->count; i++) {
                 if  (g_OID_equal(mech_type,&union_cred->mechs_array[i]))
                         return  (union_cred->cred_array[i]);
         }
         return  (GSS_C_NO_CREDENTIAL);
}


where you can see that the guy returns a cred_array[i] element, that 
obviously is null, because (most probably) the if statement above did 
not match any "compatible" mechanisms during the recursion.

Maybe I am totally wrong, since I haven't checked the code thoroughly, 
but I think that the problem is located somewhere in this code segment.

As I stated before, I was rather hoping to avoid this procedure, since I 
decided to use the linux distro for my clients due to its 
'out-of-the-box' and 'everything-is-supported' benefits as 
(slightly-)opposed to fbsd (which I use in all my servers and personal 
computers, and "love" as an operating system) can be a bit more 
"demanding" when out-of-the-box-general-purpose issues are involved. The 
thing is that the client will be used as a general-purpose student pc in 
a university lab.

Thanx again for your help,

if anybody could direct me somewhere else I would be delighted to know so!

mamalos

-- 
George Mamalakis

IT Officer
Electrical and Computer Engineer (Aristotle Un. of Thessaloniki),
MSc (Imperial College of London)

Department of Electrical and Computer Engineering
Faculty of Engineering
Aristotle University of Thessaloniki

phone number : +30 (2310) 994379