From owner-freebsd-current@FreeBSD.ORG Mon Oct 26 15:17:57 2009 Return-Path: Delivered-To: freebsd-current@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 30337106566C for ; Mon, 26 Oct 2009 15:17:57 +0000 (UTC) (envelope-from rmacklem@uoguelph.ca) Received: from esa-annu.mail.uoguelph.ca (esa-annu.mail.uoguelph.ca [131.104.91.36]) by mx1.freebsd.org (Postfix) with ESMTP id D59B98FC1A for ; Mon, 26 Oct 2009 15:17:56 +0000 (UTC) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApoEAMJa5UqDaFvI/2dsb2JhbADYY4Q/BIFe X-IronPort-AV: E=Sophos;i="4.44,626,1249272000"; d="scan'208";a="51258520" Received: from darling.cs.uoguelph.ca ([131.104.91.200]) by esa-annu-pri.mail.uoguelph.ca with ESMTP; 26 Oct 2009 11:17:55 -0400 Received: from localhost (localhost.localdomain [127.0.0.1]) by darling.cs.uoguelph.ca (Postfix) with ESMTP id 266559400CE; Mon, 26 Oct 2009 11:17:55 -0400 (EDT) X-Virus-Scanned: amavisd-new at darling.cs.uoguelph.ca Received: from darling.cs.uoguelph.ca ([127.0.0.1]) by localhost (darling.cs.uoguelph.ca [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id retJVPRwe3zG; Mon, 26 Oct 2009 11:17:54 -0400 (EDT) Received: from muncher.cs.uoguelph.ca (muncher.cs.uoguelph.ca [131.104.91.102]) by darling.cs.uoguelph.ca (Postfix) with ESMTP id 2D7A294009E; Mon, 26 Oct 2009 11:17:54 -0400 (EDT) Received: from localhost (rmacklem@localhost) by muncher.cs.uoguelph.ca (8.11.7p3+Sun/8.11.6) with ESMTP id n9QFOtt03589; Mon, 26 Oct 2009 11:24:55 -0400 (EDT) X-Authentication-Warning: muncher.cs.uoguelph.ca: rmacklem owned process doing -bs Date: Mon, 26 Oct 2009 11:24:55 -0400 (EDT) From: Rick Macklem X-X-Sender: rmacklem@muncher.cs.uoguelph.ca To: John Marshall In-Reply-To: <20091026043808.GA1064@rwpc12.mby.riverwillow.net.au> Message-ID: References: <20091026043808.GA1064@rwpc12.mby.riverwillow.net.au> MIME-Version: 1.0 Content-Type: TEXT/PLAIN; charset=US-ASCII; format=flowed Cc: freebsd-current@freebsd.org Subject: Re: Kernel Build Knob for kgssapi_krb5? X-BeenThere: freebsd-current@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Discussions about the use of FreeBSD-current List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 26 Oct 2009 15:17:57 -0000 On Mon, 26 Oct 2009, John Marshall wrote: > Is there a knob somewhere to enable building of the kgssapi_krb5 module? > > I have just built 8.0-RC2/i386 and decided to have a look at the > (experimental) NFSv4 stuff. I included options NFSD and NFSCL in my > kernel configuration. nfsd(8) indicates that gssd(8) has to be running > in order for the server to provide gss/krb5 access control. If I try > starting gssd(8) it complains of a missing kgssapi_krb5 kernel module. > The module hasn't been built. I've checked the GENERIC and NOTES files > and can't find any reference to kgssapi_krb5. Is there an undocumented > configuration option for this? > > Also, is there a "getting started" or "how to test" page somewhere to > give us some clues to get this going? > You can try this wiki page (and feel free to add to it): http://code.google.com/p/macnfsv4/wiki/FreeBSD8KerberizedNFSSetup The kernel build options are: options KGSSAPI device crypto Good luck with it, rick ps: Btw, if you are going to use NFSv3, the regular client and server should work as well, although you are welcome to test NFSD and NFSCL (only needed for NFSv4).