From owner-svn-src-all@freebsd.org Wed Aug 22 12:26:18 2018 Return-Path: Delivered-To: svn-src-all@mailman.ysv.freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2610:1c1:1:606c::19:1]) by mailman.ysv.freebsd.org (Postfix) with ESMTP id CEDB11087A0E; Wed, 22 Aug 2018 12:26:18 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from mxrelay.nyi.freebsd.org (mxrelay.nyi.freebsd.org [IPv6:2610:1c1:1:606c::19:3]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client CN "mxrelay.nyi.freebsd.org", Issuer "Let's Encrypt Authority X3" (verified OK)) by mx1.freebsd.org (Postfix) with ESMTPS id 8268371ADF; Wed, 22 Aug 2018 12:26:18 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from repo.freebsd.org (repo.freebsd.org [IPv6:2610:1c1:1:6068::e6a:0]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-GCM-SHA384 (256/256 bits)) (Client did not present a certificate) by mxrelay.nyi.freebsd.org (Postfix) with ESMTPS id 635A712F16; Wed, 22 Aug 2018 12:26:18 +0000 (UTC) (envelope-from rmacklem@FreeBSD.org) Received: from repo.freebsd.org ([127.0.1.37]) by repo.freebsd.org (8.15.2/8.15.2) with ESMTP id w7MCQITn040418; Wed, 22 Aug 2018 12:26:18 GMT (envelope-from rmacklem@FreeBSD.org) Received: (from rmacklem@localhost) by repo.freebsd.org (8.15.2/8.15.2/Submit) id w7MCQIWF040417; Wed, 22 Aug 2018 12:26:18 GMT (envelope-from rmacklem@FreeBSD.org) Message-Id: <201808221226.w7MCQIWF040417@repo.freebsd.org> X-Authentication-Warning: repo.freebsd.org: rmacklem set sender to rmacklem@FreeBSD.org using -f From: Rick Macklem Date: Wed, 22 Aug 2018 12:26:18 +0000 (UTC) To: src-committers@freebsd.org, svn-src-all@freebsd.org, svn-src-head@freebsd.org Subject: svn commit: r338193 - head/usr.sbin/nfsuserd X-SVN-Group: head X-SVN-Commit-Author: rmacklem X-SVN-Commit-Paths: head/usr.sbin/nfsuserd X-SVN-Commit-Revision: 338193 X-SVN-Commit-Repository: base MIME-Version: 1.0 Content-Type: text/plain; charset=UTF-8 Content-Transfer-Encoding: 8bit X-BeenThere: svn-src-all@freebsd.org X-Mailman-Version: 2.1.27 Precedence: list List-Id: "SVN commit messages for the entire src tree \(except for " user" and " projects" \)" List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Wed, 22 Aug 2018 12:26:19 -0000 Author: rmacklem Date: Wed Aug 22 12:26:17 2018 New Revision: 338193 URL: https://svnweb.freebsd.org/changeset/base/338193 Log: Revert r320758, which was the man page update for r320757 just reverted. This is a content change. PR: 230752 Modified: head/usr.sbin/nfsuserd/nfsuserd.8 Modified: head/usr.sbin/nfsuserd/nfsuserd.8 ============================================================================== --- head/usr.sbin/nfsuserd/nfsuserd.8 Wed Aug 22 12:20:10 2018 (r338192) +++ head/usr.sbin/nfsuserd/nfsuserd.8 Wed Aug 22 12:26:17 2018 (r338193) @@ -24,7 +24,7 @@ .\" .\" $FreeBSD$ .\" -.Dd July 6, 2017 +.Dd July 4, 2017 .Dt NFSUSERD 8 .Os .Sh NAME @@ -40,34 +40,21 @@ services plus support manage-gids for all NFS versions .Op Fl verbose .Op Fl force .Op Fl manage-gids -.Op Fl use-udpsock .Op Ar num_servers .Sh DESCRIPTION .Nm loads user and group information into the kernel for NFSv4. +It must be running for NFSv4 to function correctly, either client or server. It also provides support for manage-gids and must be running on the server if this is being used for any version of NFS. .Pp Upon startup, it loads the machines DNS domain name, plus timeout and cache size limit into the kernel. It then preloads the cache with group and user information, up to the cache size limit and forks off N children -(only 1 child for AF_LOCAL sockets), that service requests from the kernel for cache misses. -The master server is there for the sole purpose of killing off the slave(s). +(default 4), that service requests from the kernel for cache misses. The +master server is there for the sole purpose of killing off the slaves. To stop the nfsuserd, send a SIGUSR1 to the master server. .Pp -By default, upcalls from the kernel use an AF_LOCAL socket. -For this case, only one server daemon will be running. -The -.Fl use-udpsock -option may be used to make the -.Nm -daemon use a UDP socket, with upcalls done via 127.0.0.1, which was the -old behaviour for -.Nm . -Use of the UDP socket can only be done if -.Xr jail 8 -are not being used. -.Pp The following options are available: .Bl -tag -width Ds .It Fl domain Ar domain_name @@ -104,12 +91,14 @@ and uses the group list for that uid provided by .Xr getgrouplist 3 on the server instead of the list of groups provided in the RPC authenticator. This can be used to avoid the 16 group limit for AUTH_SYS. -.It Fl use-udpsock -This flag forces use of the old behaviour of a UDP socket with upcalls done via 127.0.0.1. .It Ar num_servers Specifies how many servers to create (max 20). -This option has been deprecated and is ignored for AF_LOCAL upcall sockets, -which always use a single server. +The default of 4 may be sufficient. You should run enough servers, so that +.Xr ps 1 +shows almost no running time for one or two of the slaves after the system +has been running for a long period. Running too few will have a major +performance impact, whereas running too many will only tie up some resources, +such as a process table entry and swap space. .El .Sh SEE ALSO .Xr getgrent 3 , @@ -138,11 +127,8 @@ and .Xr passwd 5 for more information on how the databases are accessed. .Pp -For the -.Fl use-udpsock -option, since the kernel communicates with the +Since the kernel communicates with the .Nm daemon via an upcall that uses the IP address 127.0.0.1, it does not work correctly when .Xr jail 8 are used and can crash the system. -This is not a problem when a AF_LOCAL socket is used.