aboutsummaryrefslogtreecommitdiff
path: root/usr.sbin/gssd
Commit message (Collapse)AuthorAgeFilesLines
* Remove the -o option from gssd(8).John Baldwin2020-04-102-57/+2
| | | | | | | | | | | | This uses DES and the kernel no longer supports DES for in-kernel GSS. Reviewed by: kp Relnotes: yes Sponsored by: Chelsio Communications Differential Revision: https://reviews.freebsd.org/D24345 Notes: svn path=/head/; revision=359787
* Update Makefile.depend filesSimon J. Gerraty2019-12-111-8/+0
| | | | | | | | | | | | | Update a bunch of Makefile.depend files as a result of adding Makefile.depend.options files Reviewed by: bdrewery MFC after: 1 week Sponsored by: Juniper Networks Differential Revision: https://reviews.freebsd.org/D22494 Notes: svn path=/head/; revision=355617
* Add Makefile.depend.optionsSimon J. Gerraty2019-12-111-0/+6
| | | | | | | | | | | | | | | | | | | | Leaf directories that have dependencies impacted by options need a Makefile.depend.options file to avoid churn in Makefile.depend DIRDEPS for cases such as OPENSSL, TCP_WRAPPERS etc can be set in local.dirdeps-options.mk which can add to those set in Makefile.depend.options See share/mk/dirdeps-options.mk Reviewed by: bdrewery MFC after: 1 week Sponsored by: Juniper Networks Differential Revision: https://reviews.freebsd.org/D22469 Notes: svn path=/head/; revision=355616
* * Handle SIGPIPE in gssdSean Eric Fagan2019-02-211-0/+1
| | | | | | | | | | | | | | | | | | | | | We've got some cases where the other end of gssd's AF_LOCAL socket gets closed, resulting in an error (and SIGPIPE) when it tries to do I/O to it. Closing without cleaning up means the next time nfsd starts up, it hangs, unkillably; this allows gssd to handle that particular error. * Limit the retry cound in gssd_syscall to 5. The default is INT_MAX, which effectively means forever. And it's an uninterruptable RPC call, so it will never stop. The two changes mitigate the problem. Reviewed by: macklem MFC after: 2 weeks Sponsored by: iXsystems Inc. Differential Revision: https://reviews.freebsd.org/D19153 Notes: svn path=/head/; revision=344402
* various: general adoption of SPDX licensing ID tags.Pedro F. Giffuni2017-11-271-0/+2
| | | | | | | | | | | | | | | | | Mainly focus on files that use BSD 2-Clause license, however the tool I was using misidentified many licenses so this was mostly a manual - error prone - task. The Software Package Data Exchange (SPDX) group provides a specification to make it easier for automated tools to detect and summarize well known opensource licenses. We are gradually adopting the specification, noting that the tags are considered only advisory and do not, in any way, superceed or replace the license texts. No functional change intended. Notes: svn path=/head/; revision=326276
* DIRDEPS_BUILD: Update dependencies.Bryan Drewery2017-10-311-1/+0
| | | | | | | Sponsored by: Dell EMC Isilon Notes: svn path=/head/; revision=325188
* usr.sbin: normalize paths using SRCTOP-relative paths or :H when possibleEnji Cooper2017-03-041-2/+2
| | | | | | | | | | This simplifies make logic/output MFC after: 1 month Sponsored by: Dell EMC Isilon Notes: svn path=/head/; revision=314659
* usr.sbin: minor spelling fixes on comments.Pedro F. Giffuni2016-05-011-1/+1
| | | | | | | No functional change. Notes: svn path=/head/; revision=298886
* DIRDEPS_BUILD: Regenerate without local dependencies.Bryan Drewery2016-02-241-12/+0
| | | | | | | | | | | These are no longer needed after the recent 'beforebuild: depend' changes and hooking DIRDEPS_BUILD into a subset of FAST_DEPEND which supports skipping 'make depend'. Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=295989
* Unset the gss kernel state when gssd exitsJosh Paetzel2016-01-011-0/+2
| | | | | | | | | | | | | | | | | When gssd exits it leaves the kernel state set by gssd_syscall(). nfsd sees this and waits endlessly in an unkillable state for gssd to come back. If you had acidentally started gssd then stopped it, then started nfsd you'd be in a bad way until you either restarted gssd or rebooted the system. This change fixes that by setting the kernel state to "" when gssd exits. Reviewed by: rmacklem MFC after: 1 week Sponsored by: iXsystems Notes: svn path=/head/; revision=293043
* Increase group limit for kerberized NFSv4Josh Paetzel2015-09-261-2/+2
| | | | | | | | | | | PR: 202659 Submitted by: matthew.l.dailey@dartmouth.edu Reviewed by: rmacklem dfr MFC after: 1 week Sponsored by: iXsystems Notes: svn path=/head/; revision=288272
* Add META_MODE support.Simon J. Gerraty2015-06-131-0/+44
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | Off by default, build behaves normally. WITH_META_MODE we get auto objdir creation, the ability to start build from anywhere in the tree. Still need to add real targets under targets/ to build packages. Differential Revision: D2796 Reviewed by: brooks imp Notes: svn path=/head/; revision=284345
| * dirdeps.mk now sets DEP_RELDIRSimon J. Gerraty2015-06-081-2/+0
| | | | | | | | Notes: svn path=/projects/bmake/; revision=284172
| * Merge sync of headSimon J. Gerraty2015-05-273-9/+8
| |\ | |/ |/| | | Notes: svn path=/projects/bmake/; revision=283595
| * Merge head from 7/28Simon J. Gerraty2014-08-191-1/+1
| |\ | | | | | | | | | Notes: svn path=/projects/bmake/; revision=270164
| * | Updated dependenciesSimon J. Gerraty2014-05-161-0/+1
| | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=266219
| * | Merge from headSimon J. Gerraty2014-05-081-1/+1
| |\ \ | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=265720
| * | | Updated dependenciesSimon J. Gerraty2013-10-131-0/+4
| | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=256419
| * | | Merge from headSimon J. Gerraty2013-09-052-18/+407
| |\ \ \ | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=255263
| * | | | Updated dependenciesSimon J. Gerraty2013-03-111-0/+1
| | | | | | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=248169
| * | | | Updated dependenciesSimon J. Gerraty2013-02-161-2/+7
| | | | | | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=246868
| * | | | Sync with HEAD.David E. O'Brien2013-02-083-12/+361
| |\ \ \ \ | | | | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=246555
| * \ \ \ \ Sync from headSimon J. Gerraty2012-11-041-1/+1
| |\ \ \ \ \ | | | | | | | | | | | | | | | | | | | | | Notes: svn path=/projects/bmake/; revision=242545
| * | | | | | Sync FreeBSD's bmake branch with Juniper's internal bmake branch.Marcel Moolenaar2012-08-221-0/+34
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Requested by: Simon Gerraty <sjg@juniper.net> Notes: svn path=/projects/bmake/; revision=239572
* | | | | | | Add an auto-generated file to CLEANFILES.Mark Johnston2015-02-131-1/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | MFC after: 3 days Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=278691
* | | | | | | Check for an error from daemon(3), and correct the check for an error fromMark Johnston2015-02-131-2/+3
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | socket(2). MFC after: 3 days Sponsored by: EMC / Isilon Storage Division Notes: svn path=/head/; revision=278690
* | | | | | | mdoc: sort SEE ALSO.Joel Dahl2014-12-261-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | Notes: svn path=/head/; revision=276258
* | | | | | | Convert usr.sbin to LIBADDBaptiste Daroussin2014-11-251-4/+2
| |_|_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reduce overlinking Notes: svn path=/head/; revision=275054
* | | | | | use .Mt to mark up email addresses consistently (part2)Baptiste Daroussin2014-06-201-1/+1
| |_|_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | PR: 191174 Submitted by: Franco Fichtner <franco@lastsummer.de> Notes: svn path=/head/; revision=267668
* | | | | Use src.opts.mk in preference to bsd.own.mk except where we need stuffWarner Losh2014-05-061-1/+1
| |_|_|/ |/| | | | | | | | | | | | | | | | | | | | | | | from the latter. Notes: svn path=/head/; revision=265420
* | | | Fix some Kerberos related terminology.Rick Macklem2013-07-081-2/+2
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a content change. Requested by: bjk Notes: svn path=/head/; revision=253020
* | | | Oops, initialize the krb5 ret values correctly (to anything non-zero).Rick Macklem2013-07-081-1/+1
| | | | | | | | | | | | | | | | Notes: svn path=/head/; revision=253018
* | | | Make sure the krb5 status variables are correctly initialized.Rick Macklem2013-07-081-0/+1
| | | | | | | | | | | | | | | | Notes: svn path=/head/; revision=253017
* | | | Document the new "-h" option for the gssd daemon.Rick Macklem2013-07-081-1/+12
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a content change. Reviewed by: jhb Notes: svn path=/head/; revision=253016
* | | | Add a new "-h" option to the gssd daemon that enables support forRick Macklem2013-07-081-13/+140
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | host based (kerberos service principal) initiator credentials in the default keytab file. This option won't actually be useful until the corresponding kernel changes are committed. Reviewed by: jhb Notes: svn path=/head/; revision=253015
* | | | Document the "-o" option added by r252138.Rick Macklem2013-06-241-1/+6
| | | | | | | | | | | | | | | | | | | | | | | | | | | | MFC after: 10 days Notes: svn path=/head/; revision=252139
* | | | Add a new "-o" option to the gssd which forces gss_init_sec_context()Rick Macklem2013-06-241-3/+136
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | to use DES and the associated old style GSS initialization token. This appears to be required for some non-FreeBSD servers to get a kerberized NFS mount to work. Also, ignore some signals when daemonized, which might fix the gssd from "disappearing" without leaving a core dump. Given the tight timeframe for the FreeBSD9.2 release, I have committed this while waiting for code review. I will commit changes recommended by the review in a separate commit. Reviewed by: dfr (pending) MFC after: 10 days Notes: svn path=/head/; revision=252138
* | | | Fix r251444 so that gssd.c still builds for WITHOUT_KERBEROS.Rick Macklem2013-06-061-0/+1
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reported by: bf1783@gmail.com MFC after: 2 weeks Notes: svn path=/head/; revision=251476
* | | | Document the new "-v" option for the gssd daemon.Rick Macklem2013-06-051-2/+14
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | This is a content change. MFC after: 2 weeks Notes: svn path=/head/; revision=251445
* | | | Add a "-v" (verbose) option to the gssd daemon, to helpRick Macklem2013-06-051-2/+78
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | with diagnosis of kerberized NFS mount problems. When set, messages are sent to syslog() (or fprintf(stderr,...) if "-d" is also specified) to indicate activity/results of kgssapi upcalls. Reviewed by: jhb MFC after: 2 weeks Notes: svn path=/head/; revision=251444
* | | | Fix the getpwuid_r() call in the gssd daemon so that it handlesRick Macklem2013-05-021-2/+25
| |_|/ |/| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | the ERANGE error return case. Without this fix, authentication of users for certain system setups could fail unexpectedly. Reported by: Elias Martenson (lokedhs@gmail.com) Tested by: Elias Martenson (earlier version) MFC after: 2 weeks Notes: svn path=/head/; revision=250176
* | | Grammar fixes and some wordsmithingBenjamin Kaduk2013-01-051-11/+8
| | | | | | | | | | | | | | | | | | | | | | | | | | | Discussed with: rmacklem Approved by: hrs (mentor) MFC after: 2 weeks Notes: svn path=/head/; revision=245051
* | | Fix r244604 so that it builds when MK_KERBEROS_SUPPORT == "no".Rick Macklem2013-01-032-2/+21
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | Reported by: bf Tested by: bf Reviewed by: gcooper MFC after: 3 days Notes: svn path=/head/; revision=245014
* | | Fix the Makefile so it can build gssd.c after r244604.Rick Macklem2012-12-231-2/+2
| | | | | | | | | | | | | | | | | | | | | MFC after: 2 weeks Notes: svn path=/head/; revision=244638
* | | Document the new gssd daemon options added by r244604.Rick Macklem2012-12-221-1/+27
| | | | | | | | | | | | | | | | | | | | | | | | | | | This is a content change. MFC after: 2 weeks Notes: svn path=/head/; revision=244605
* | | It was reported via email that some sshds create kerberosRick Macklem2012-12-221-11/+295
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | credential cache files with names other than /tmp/krb5cc_<uid>. The gssd daemon does not know how to find these credential caches. This patch implements a new option "-s" that does a search for credential cache files, using roughly the same algorithm as the gssd daemon for Linux uses. The gssd behaviour is only changed if the new "-s" option is specified. It also implements two other new options related to the "-s" option. Reported by: Piete.Brooks at cl.cam.ac.uk, Herbert Poeckl Tested by: Herbert Poeckl (admin at ist.tugraz.at), Illias A. Marinos MFC after: 2 weeks Notes: svn path=/head/; revision=244604
* | | Fix the gssd daemon so that it uses syslog() to reportRick Macklem2012-12-171-0/+23
| |/ |/| | | | | | | | | | | | | | | | | | | | | an error instead of calling err() when it is daemonized, so that the error gets logged. Discussed with: rwatson, jhb Tested by: Illias A. Marinos, Herbert Poeckl MFC after: 2 weeks Notes: svn path=/head/; revision=244331
* | mdoc: add missing width argument to Bl -tag.Joel Dahl2012-06-031-1/+1
|/ | | | Notes: svn path=/head/; revision=236500
* Consistently set RPCGEN_CPP when running rpcgen, so the C preprocessorDimitry Andric2012-02-071-1/+1
| | | | | | | | | set via ${CPP} is used, instead of always using hardcoded /usr/bin/cpp. MFC after: 1 week Notes: svn path=/head/; revision=231118
* mdoc: consistently spell our email addresses <foo@FreeBSD.org>Ulrich Spörlein2010-05-191-1/+1
| | | | | | | Reviewed by: ru Notes: svn path=/head/; revision=208291
generated by cgit v1.2.3 (git 2.25.1) at 2024-05-18 08:49:02 +0000