aboutsummaryrefslogtreecommitdiff
diff options
context:
space:
mode:
authorRick Macklem <rmacklem@FreeBSD.org>2023-05-26 23:05:00 +0000
committerRick Macklem <rmacklem@FreeBSD.org>2023-05-26 23:05:00 +0000
commit823ea1744e96430cb418c384aafd77ee6f916ce4 (patch)
tree864331c0aef4c6ab2a3b17297788894e1e6d4f2d
parentb51ac373dd38f776b90d69f56652c2a9a6f165f8 (diff)
downloadsrc-823ea1744e96430cb418c384aafd77ee6f916ce4.tar.gz
src-823ea1744e96430cb418c384aafd77ee6f916ce4.zip
RELNOTES: Add an entry for the NFS "syskrb5" mount option
-rw-r--r--RELNOTES11
1 files changed, 11 insertions, 0 deletions
diff --git a/RELNOTES b/RELNOTES
index 4de47ccafddc..cf6ed985f608 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -10,6 +10,17 @@ newline. Entries should be separated by a newline.
Changes to this file should not be MFCed.
+0644746d5091:
+ Add a new "syskrb5" mount option for Kerberized NFSv4.1/4.2 mounts.
+ Without this patch, a Kerberized NFSv4.1/4.2 mount must provide
+ a Kerberos credential for the client at mount time.
+ This patch uses a feature of NFSv4.1/4.2 called SP4_NONE, which
+ allows the state maintenance operations to be performed by any
+ authentication mechanism, so that these operations may be done via
+ AUTH_SYS instead of RPCSEC_GSS (KerberosV). As such, no Kerberos
+ credential is required at mount time.
+ See mount_nfs(8).
+
b4805d577787 and many others:
Add support so that nfsd(8), nfsuserd(8), mountd(8), gssd(8)
and rpc.tlsservd(8) can be run in an appropriately configured