Date: Tue, 27 Oct 2009 13:31:18 +1100 From: John Marshall <john.marshall@riverwillow.com.au> To: Rick Macklem <rmacklem@uoguelph.ca> Cc: freebsd-current@freebsd.org, "b. f." <bf1783@googlemail.com> Subject: Re: Kernel Build Knob for kgssapi_krb5? Message-ID: <20091027023118.GD1064@rwpc12.mby.riverwillow.net.au> In-Reply-To: <Pine.GSO.4.63.0910261125360.28663@muncher.cs.uoguelph.ca> References: <d873d5be0910252316t46286a84g1e366d9891939027@mail.gmail.com> <Pine.GSO.4.63.0910261125360.28663@muncher.cs.uoguelph.ca>
next in thread | previous in thread | raw e-mail | index | archive | help
[-- Attachment #1 --] On Mon, 26 Oct 2009, 11:31 -0400, Rick Macklem wrote: > On Mon, 26 Oct 2009, b. f. wrote: > >>Is there a knob somewhere to enable building of the kgssapi_krb5 module? > > > >I don't see any for the module -- Doug Rabson doesn't seem to have > >added it to /usr/src/sys/modules/Makefile in r184588: > > > >http://svn.freebsd.org/viewvc/base?view=revision&revision=184588 > > > >And I see that it has some implicit dependencies, like INET6, so the > >kinks have not been ironed out of this portion of the code. You could > >try: > > > >cd /usr/src/sys/modules/kgssapi_krb5 && make obj && make depend && > >make && make install > > At this point, both the regular nfs and experimental nfs subsystems > only know to use the gssapi stuff if they're built with > options KGSSAPI > in the kernel config. > > I've never tried to build it as a module, but I do know it needs: > device crypto I didn't try building as a separate kernel module but configuring it in the kernel with 'options KGSSAPI' and 'device crypto' worked for me. The kernel build didn't complain that I don't have INET6 included. > >>Also, is there a "getting started" or "how to test" page somewhere to > >>give us some clues to get this going? > > > >http://code.google.com/p/macnfsv4/wiki/FreeBSD8KerberizedNFSSetup > > > Just fyi, although I can't avoid blame for the NFSD/NFSCL code, I > wasn't the author of the Kernel GSSAPI code, just a happy user. > > Hopefully you'll find the wiki page useful. Feel free to add things > to it and/or email me with changes. Thank you! Might I suggest that a link to this work from the FreeBSD wiki and the 8.0 Release Notes would be a good idea? More people are going to want to know how to go about using/testing this now that it is included in a release. -- John Marshall [-- Attachment #2 --] -----BEGIN PGP SIGNATURE----- Version: GnuPG v2.0.13 (FreeBSD) iEYEARECAAYFAkrmW3YACgkQw/tAaKKahKLWvwCdFCQVJvmRuX57N9oFB11esHaO SMYAn2iQkUzHbvWTbhOGxCE79nnGEjMq =2Mj6 -----END PGP SIGNATURE-----
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?20091027023118.GD1064>