Skip site navigation (1)Skip section navigation (2)
Date:      Mon, 26 Oct 2009 11:24:55 -0400 (EDT)
From:      Rick Macklem <rmacklem@uoguelph.ca>
To:        John Marshall <john.marshall@riverwillow.com.au>
Cc:        freebsd-current@freebsd.org
Subject:   Re: Kernel Build Knob for kgssapi_krb5?
Message-ID:  <Pine.GSO.4.63.0910261119050.28663@muncher.cs.uoguelph.ca>
In-Reply-To: <20091026043808.GA1064@rwpc12.mby.riverwillow.net.au>

index | next in thread | previous in thread | raw e-mail



On Mon, 26 Oct 2009, John Marshall wrote:

> Is there a knob somewhere to enable building of the kgssapi_krb5 module?
>
> I have just built 8.0-RC2/i386 and decided to have a look at the
> (experimental) NFSv4 stuff.  I included options NFSD and NFSCL in my
> kernel configuration.  nfsd(8) indicates that gssd(8) has to be running
> in order for the server to provide gss/krb5 access control.  If I try
> starting gssd(8) it complains of a missing kgssapi_krb5 kernel module.
> The module hasn't been built.  I've checked the GENERIC and NOTES files
> and can't find any reference to kgssapi_krb5.  Is there an undocumented
> configuration option for this?
>
> Also, is there a "getting started" or "how to test" page somewhere to
> give us some clues to get this going?
>
You can try this wiki page (and feel free to add to it):
http://code.google.com/p/macnfsv4/wiki/FreeBSD8KerberizedNFSSetup

The kernel build options are:
options	KGSSAPI
device crypto

Good luck with it, rick
ps: Btw, if you are going to use NFSv3, the regular client and
     server should work as well, although you are welcome to test
     NFSD and NFSCL (only needed for NFSv4).



home | help

Want to link to this message? Use this
URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?Pine.GSO.4.63.0910261119050.28663>