[Date Prev][Date Next] [Thread Prev][Thread Next] [Date Index] [Thread Index]

Bug#651558: marked as done (nfs-utils: NFSv4 sec=krb5 clients must install nfs-kernel-server to use rpc.svcgssd to receive delegations)



Your message dated Sun, 22 Jan 2012 15:17:45 +0000
with message-id <E1RozAv-00022N-0c@franck.debian.org>
and subject line Bug#651558: fixed in nfs-utils 1:1.2.5-4
has caused the Debian Bug report #651558,
regarding nfs-utils: NFSv4 sec=krb5 clients must install nfs-kernel-server to use rpc.svcgssd to receive delegations
to be marked as done.

This means that you claim that the problem has been dealt with.
If this is not the case it is now your responsibility to reopen the
Bug report if necessary, and/or fix the problem forthwith.

(NB: If you are a system administrator and have no idea what this
message is talking about, this may indicate a serious mail system
misconfiguration somewhere. Please contact owner@bugs.debian.org
immediately.)


-- 
651558: http://bugs.debian.org/cgi-bin/bugreport.cgi?bug=651558
Debian Bug Tracking System
Contact owner@bugs.debian.org with problems
--- Begin Message ---
Package: nfs-utils
Version: 1.2.5-2

According to J. Bruce Fields on the linux-nfs mailing list [0], NFSv4
clients using any sec=krb5 variant will need to run rpc.svcgssd to
receive delegations.  On debian, this appears to mean that the clients
will need to install nfs-kernel-server, even if they do not intend to
act as a server.

Should rpc.svcgssd get moved out to the nfs-common package (or, if the
fragmentation isn't too much, to its own package)?  It doesn't seem like
encouraging clients to run nfsd when they have no intention of serving
files is a good idea.

Another alternative is to consider encouraging NFSv4.1 instead of
NFSv4 (apparently the delegations in 4.1 happen over the
client-initiated channels instead of establishing new connections back),
but this was only been enabled in debian kernels since
3.1.

If moving the daemon implementation between packages isn't the right
idea, it would at least be good to document what's going on here and
what the recommended configuration is for decently-performing
cryptographically-secured NFS.  I see no mention of the multi-daemon
requirement for clients in
/usr/share/doc/nfs-common/README.Debian.nfsv4, for example.

If i wasn't stumbling my way through this setup myself, i'd offer to
write improved documentation, but i'm not in deep enough to know
best-practices or advise others at the moment.

Thanks for maintaining nfs-utils in debian,

       --dkg

[0] http://thread.gmane.org/gmane.linux.nfs/45498/focus=45502

Attachment: pgpQq55cijLlI.pgp
Description: PGP signature


--- End Message ---
--- Begin Message ---
Source: nfs-utils
Source-Version: 1:1.2.5-4

We believe that the bug you reported is fixed in the latest version of
nfs-utils, which is due to be installed in the Debian FTP archive:

nfs-common_1.2.5-4_i386.deb
  to main/n/nfs-utils/nfs-common_1.2.5-4_i386.deb
nfs-kernel-server_1.2.5-4_i386.deb
  to main/n/nfs-utils/nfs-kernel-server_1.2.5-4_i386.deb
nfs-utils_1.2.5-4.debian.tar.bz2
  to main/n/nfs-utils/nfs-utils_1.2.5-4.debian.tar.bz2
nfs-utils_1.2.5-4.dsc
  to main/n/nfs-utils/nfs-utils_1.2.5-4.dsc



A summary of the changes between this version and the previous one is
attached.

Thank you for reporting the bug, which will now be closed.  If you
have further comments please address them to 651558@bugs.debian.org,
and the maintainer will reopen the bug report if appropriate.

Debian distribution maintenance software
pp.
Luk Claes <luk@debian.org> (supplier of updated nfs-utils package)

(This message was generated automatically at their request; if you
believe that there is a problem with it please contact the archive
administrators by mailing ftpmaster@debian.org)


-----BEGIN PGP SIGNED MESSAGE-----
Hash: SHA1

Format: 1.8
Date: Sun, 22 Jan 2012 15:46:25 +0100
Source: nfs-utils
Binary: nfs-kernel-server nfs-common
Architecture: source i386
Version: 1:1.2.5-4
Distribution: unstable
Urgency: low
Maintainer: Debian kernel team <debian-kernel@lists.debian.org>
Changed-By: Luk Claes <luk@debian.org>
Description: 
 nfs-common - NFS support files common to client and server
 nfs-kernel-server - support for NFS kernel server
Closes: 651558 651634
Changes: 
 nfs-utils (1:1.2.5-4) unstable; urgency=low
 .
   * Add libmount-dev to Build-Depends and explicitly enable it.
   * Move rpc.svcgssd to nfs-common (Closes: #651558).
   * Also change owning group for /var/lib/nfs (Closes: #651634).
Checksums-Sha1: 
 59c1cc4a5a3ce6edff1124cd333b0b9b6ccf7a78 1604 nfs-utils_1.2.5-4.dsc
 cea5c0e85215d8668168a6050c1cd8adf92f045f 35706 nfs-utils_1.2.5-4.debian.tar.bz2
 eedce42183a1f3ebe6db385a70c08f2d2cecfd00 151862 nfs-kernel-server_1.2.5-4_i386.deb
 e4ef7ea77458a8d66f125af518e66f16e5779291 286218 nfs-common_1.2.5-4_i386.deb
Checksums-Sha256: 
 5c5739055fa3b95b32c7ed084f0f4962acb4addf77face97d3126c3fa6d04955 1604 nfs-utils_1.2.5-4.dsc
 786b743101337eb140b209aaf25c5f4f8b6073dcf9fcf4aa466b3815ba03fb36 35706 nfs-utils_1.2.5-4.debian.tar.bz2
 dfea1acca750c97a9f31deb81ba5dbbf11d7b8a18132b6a5b73c154d2acadaca 151862 nfs-kernel-server_1.2.5-4_i386.deb
 982478c3d2b0658b1cfc7a0f820a8906372a0e8b92cfb6697fc241a94db4dc11 286218 nfs-common_1.2.5-4_i386.deb
Files: 
 fe5ea32938bffc1cfe5e0e175d6eeb30 1604 net standard nfs-utils_1.2.5-4.dsc
 892453cbad0b70e18c40216673557aff 35706 net standard nfs-utils_1.2.5-4.debian.tar.bz2
 519c80e388ca68cd909fc434ee74a850 151862 net optional nfs-kernel-server_1.2.5-4_i386.deb
 c18b7db9284df0d6663c2b6b14988d6d 286218 net standard nfs-common_1.2.5-4_i386.deb

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1.4.11 (GNU/Linux)

iEYEARECAAYFAk8cJ3IACgkQ5UTeB5t8Mo1icQCglRGozZnMQE0lKL/1tXBZSyZh
zMUAmQEeZ+5PY3RqrHGPOLk+jiYyMIxd
=QBbD
-----END PGP SIGNATURE-----



--- End Message ---

Reply to: