diff options
author | Rick Macklem <rmacklem@FreeBSD.org> | 2023-05-26 23:05:00 +0000 |
---|---|---|
committer | Rick Macklem <rmacklem@FreeBSD.org> | 2023-05-26 23:05:00 +0000 |
commit | 823ea1744e96430cb418c384aafd77ee6f916ce4 (patch) | |
tree | 864331c0aef4c6ab2a3b17297788894e1e6d4f2d | |
parent | b51ac373dd38f776b90d69f56652c2a9a6f165f8 (diff) | |
download | src-823ea1744e96430cb418c384aafd77ee6f916ce4.tar.gz src-823ea1744e96430cb418c384aafd77ee6f916ce4.zip |
RELNOTES: Add an entry for the NFS "syskrb5" mount option
-rw-r--r-- | RELNOTES | 11 |
1 files changed, 11 insertions, 0 deletions
@@ -10,6 +10,17 @@ newline. Entries should be separated by a newline. Changes to this file should not be MFCed. +0644746d5091: + Add a new "syskrb5" mount option for Kerberized NFSv4.1/4.2 mounts. + Without this patch, a Kerberized NFSv4.1/4.2 mount must provide + a Kerberos credential for the client at mount time. + This patch uses a feature of NFSv4.1/4.2 called SP4_NONE, which + allows the state maintenance operations to be performed by any + authentication mechanism, so that these operations may be done via + AUTH_SYS instead of RPCSEC_GSS (KerberosV). As such, no Kerberos + credential is required at mount time. + See mount_nfs(8). + b4805d577787 and many others: Add support so that nfsd(8), nfsuserd(8), mountd(8), gssd(8) and rpc.tlsservd(8) can be run in an appropriately configured |