From owner-freebsd-current@FreeBSD.ORG Mon Oct 26 06:16:24 2009 Return-Path: Delivered-To: freebsd-current@FreeBSD.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 3CA78106568D for ; Mon, 26 Oct 2009 06:16:24 +0000 (UTC) (envelope-from bf1783@googlemail.com) Received: from mail-ew0-f218.google.com (mail-ew0-f218.google.com [209.85.219.218]) by mx1.freebsd.org (Postfix) with ESMTP id CA6C58FC14 for ; Mon, 26 Oct 2009 06:16:23 +0000 (UTC) Received: by ewy18 with SMTP id 18so10196522ewy.43 for ; Sun, 25 Oct 2009 23:16:22 -0700 (PDT) DKIM-Signature: v=1; a=rsa-sha256; c=relaxed/relaxed; d=googlemail.com; s=gamma; h=domainkey-signature:mime-version:received:date:message-id:subject :from:to:cc:content-type; bh=qEjHU1nTmlh6EmBwEoO+/sIZLm817ENZoT+E6g1DLks=; b=LI4aG5GYLoaz3SokIxxsJCSIFUMhBzVPIEYfDYk/T/DCj0dS5I42rAZY1t/mS9HEbU crJhJ7uY+mK4dI0RWYiaskxjuBgCcx6Roie705rigsKV1jBS9rlE0aBA4HrIhW+g1lvX I1YlFpPc7AvbadxLfmZvo4v9FWt0dL7IESiPM= DomainKey-Signature: a=rsa-sha1; c=nofws; d=googlemail.com; s=gamma; h=mime-version:date:message-id:subject:from:to:cc:content-type; b=XeLX2tw8O82Z10+5sZtCj4hXgXllLPepxHsLtW5n+n5HGiRzbORalPzWIRjo9befI9 gwj16RBNxQtvD2wUezYfQhlMzFvpSkXEpooHo8MnGJFMuXCf1EJesbWQMopK2ajwDtol C+vRArwb8EJnFekI9PzAV7G3oplzUdwrnW8zY= MIME-Version: 1.0 Received: by 10.216.88.71 with SMTP id z49mr1408626wee.90.1256537782656; Sun, 25 Oct 2009 23:16:22 -0700 (PDT) Date: Mon, 26 Oct 2009 06:16:22 +0000 Message-ID: From: "b. f." To: john.marshall@riverwillow.com.au Content-Type: text/plain; charset=ISO-8859-1 Cc: freebsd-current@FreeBSD.org Subject: Re: Kernel Build Knob for kgssapi_krb5? X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2009 06:16:24 -0000 >Is there a knob somewhere to enable building of the kgssapi_krb5 module? > I don't see any for the module -- Doug Rabson doesn't seem to have added it to /usr/src/sys/modules/Makefile in r184588: http://svn.freebsd.org/viewvc/base?view=revision&revision=184588 And I see that it has some implicit dependencies, like INET6, so the kinks have not been ironed out of this portion of the code. You could try: cd /usr/src/sys/modules/kgssapi_krb5 && make obj && make depend && make && make install >I have just built 8.0-RC2/i386 and decided to have a look at the >(experimental) NFSv4 stuff. I included options NFSD and NFSCL in my >kernel configuration. nfsd(8) indicates that gssd(8) has to be running >in order for the server to provide gss/krb5 access control. If I try >starting gssd(8) it complains of a missing kgssapi_krb5 kernel module. >The module hasn't been built. I've checked the GENERIC and NOTES files >and can't find any reference to kgssapi_krb5. Is there an undocumented >configuration option for this? > >Also, is there a "getting started" or "how to test" page somewhere to >give us some clues to get this going? See the commit message mentioned above. Also, the primary author, Rick Macklem, has a tutorial: http://code.google.com/p/macnfsv4/wiki/FreeBSD8KerberizedNFSSetup b.