Re: [OE-core] [PATCH v7 3/3] nfs-utils: Configure nfsv4 ID mapping & Kerberos

[Enrico Scholz <enrico.scholz@sigma-chemnitz.de>]

"Dan McGregor" <danismostlikely@gmail.com> writes:

> Add support for the nfsv4 user ID mapping daemon, configured with
> a sensible default, and add a packageconfig for Kerberos support.
>
> This is reasonably tested in production in our environment, but only
> systemd support. There'll be some more work to do to get GSSAPI and
> NFS idmapd support integreated into that.

Just for interest: how do you solve GSSAPI?  I made it work for me, put
it requires ugly changes (e.g. see [1])

There is an early dependency loop in libtirpc -> python -> kerberos ->
openssl -> python.  I solved it by

- creating a throw-away krb5-initial package [2]; installs libraries in
  /opt/krb5 and is used only at a few places.

- splitting libtirpc; this required to touch only a few other packages
  some weeks/months ago.  But now, [file-rdeps] error is triggered and
  every

Both is ugly....



Enrico

Footnotes:
[1]  https://gitlab.com/ensc-groups/bpi-router/de.ensc.bpi-router/-/tree/nanbield-next/meta-core/recipes-extended/libtirpc?ref_type=heads

     (there exists a newer version but I do have not pushed it yet...)

[2]  https://gitlab.com/ensc-groups/bpi-router/de.ensc.bpi-router/-/tree/nanbield-next/meta-core/recipes-connectivity/krb5?ref_type=heads