Skip site navigation (1)Skip section navigation (2)
Date:      Fri, 26 May 2023 23:06:27 GMT
From:      Rick Macklem <rmacklem@FreeBSD.org>
To:        src-committers@FreeBSD.org, dev-commits-src-all@FreeBSD.org, dev-commits-src-branches@FreeBSD.org
Subject:   git: 823ea1744e96 - stable/13 - RELNOTES: Add an entry for the NFS "syskrb5" mount option
Message-ID:  <202305262306.34QN6Rdp093930@gitrepo.freebsd.org>

next in thread | raw e-mail | index | archive | help
The branch stable/13 has been updated by rmacklem:

URL: https://cgit.FreeBSD.org/src/commit/?id=823ea1744e96430cb418c384aafd77ee6f916ce4

commit 823ea1744e96430cb418c384aafd77ee6f916ce4
Author:     Rick Macklem <rmacklem@FreeBSD.org>
AuthorDate: 2023-05-26 23:05:00 +0000
Commit:     Rick Macklem <rmacklem@FreeBSD.org>
CommitDate: 2023-05-26 23:05:00 +0000

    RELNOTES: Add an entry for the NFS "syskrb5" mount option
---
 RELNOTES | 11 +++++++++++
 1 file changed, 11 insertions(+)

diff --git a/RELNOTES b/RELNOTES
index 4de47ccafddc..cf6ed985f608 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -10,6 +10,17 @@ newline.  Entries should be separated by a newline.
 
 Changes to this file should not be MFCed.
 
+0644746d5091:
+	Add a new "syskrb5" mount option for Kerberized NFSv4.1/4.2 mounts.
+	Without this patch, a Kerberized NFSv4.1/4.2 mount must provide
+	a Kerberos credential for the client at mount time.
+	This patch uses a feature of NFSv4.1/4.2 called SP4_NONE, which
+	allows the state maintenance operations to be performed by any
+	authentication mechanism, so that these operations may be done via
+	AUTH_SYS instead of RPCSEC_GSS (KerberosV).  As such, no Kerberos
+	credential is required at mount time.
+	See mount_nfs(8).
+
 b4805d577787 and many others:
 	Add support so that nfsd(8), nfsuserd(8), mountd(8), gssd(8)
 	and rpc.tlsservd(8) can be run in an appropriately configured



Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?202305262306.34QN6Rdp093930>