Date: Sun, 14 Apr 2024 20:17:43 +0000 From: John F Carr <jfc@mit.edu> To: Rick Macklem <rick.macklem@gmail.com> Cc: Andreas Kempe <kempe@lysator.liu.se>, "freebsd-fs@freebsd.org" <freebsd-fs@freebsd.org> Subject: Re: Kerberised NFSv4 - everyone gets mapped to nobody on file access Message-ID: <5BBB7631-B992-4682-8D9C-144073CA64C6@mit.edu> In-Reply-To: <CAM5tNy5a-CALZdrHhCQ1akmR3=BqeEK8EFb6UxZ%2BCOp38u3bTg@mail.gmail.com> References: <ZgNiZsYl6D-GnRwI@shipon.lysator.liu.se> <CAM5tNy53suTizsOmsKvN9Zrd6LciAFrS3PEctUJjK%2BHH9QcMrw@mail.gmail.com> <CAM5tNy7YM6bRKTX3pLR8hC-a-cmxXA=wv4j0E8cBWGthbxzLdQ@mail.gmail.com> <ZgRUqkl1zVxMPt6K@shipon.lysator.liu.se> <CAM5tNy68W16ut4vR1Y9xxPwaU%2BT%2Bt8fU8dwg3DbfhMT5h5iEDQ@mail.gmail.com> <ZgVKehV_9ePUBdwd@shipon.lysator.liu.se> <CAM5tNy4ye6BwYAZ%2BVYQOgDnSjAmyg%2BCCu=XCm-%2BDZucfrfwgKw@mail.gmail.com> <CAM5tNy4%2BbUc0VMY8i_E9P-pT0CEOXHpKzitMuKYzydH465OBGg@mail.gmail.com> <ZgiIAyDKPlCr1c9C@shipon.lysator.liu.se> <CAM5tNy5GbbZSJ3sOALx6zUkZz_7BJGzQ_63srVK88RFecb_eCQ@mail.gmail.com> <Zhv1jtKU8lRdKOul@shipon.lysator.liu.se> <CAM5tNy5a-CALZdrHhCQ1akmR3=BqeEK8EFb6UxZ%2BCOp38u3bTg@mail.gmail.com>
next in thread | previous in thread | raw e-mail | index | archive | help
DQoNCj4gT24gQXByIDE0LCAyMDI0LCBhdCAxNTozMCwgUmljayBNYWNrbGVtIDxyaWNrLm1hY2ts ZW1AZ21haWwuY29tPiB3cm90ZToNCj4gDQo+IE9uIFN1biwgQXByIDE0LCAyMDI0IGF0IDg6Mjbi gK9BTSBBbmRyZWFzIEtlbXBlIDxrZW1wZUBseXNhdG9yLmxpdS5zZT4gd3JvdGU6DQo+PiANCj4+ IE9uIFNhdCwgTWFyIDMwLCAyMDI0IGF0IDA0OjAxOjUwUE0gLTA3MDAsIFJpY2sgTWFja2xlbSB3 cm90ZToNCj4+PiBPbiBTYXQsIE1hciAzMCwgMjAyNCBhdCAyOjQ14oCvUE0gQW5kcmVhcyBLZW1w ZSA8a2VtcGVAbHlzYXRvci5saXUuc2U+IHdyb3RlOg0KPj4+PiBEaWQgeW91IGhhdmUgYSBsb29r IGF0IHRoZSBvd25lciBmaWVsZCBpbiB0aGUgb3BlbiByZXFlc3QgdGhhdCBjcmVhdGVkDQo+Pj4+ IHRoZSBmaWxlPyBUbyBtZSwgaXQgbG9va3MgdmVyeSBzdHJhbmdlLiBDb3VsZCBpdCBiZSB0aGF0 IHRoZSBjbGllbnQNCj4+Pj4gaXNuJ3Qgc2VuZGluZyBhIGNvcnJlY3Qgb3duZXIgaW4gdGhlIGNy ZWF0aW9uIHJlcXVlc3QsIGNhdXNpbmcgdGhlDQo+Pj4+IHNlcnZlciB0byBtYXAgaXQgdG8gbm9i b2R5Pw0KPj4+IFRoZSBvbmx5IHNldGFibGUgYXR0cmlidXRlIHNwZWNpZmllZCBieSB0aGUgT3Bl biByZXF1ZXN0IGlzICJtb2RlIi4NCj4+PiBUaGF0IGp1c3QgbWVhbnMgdGhhdCB0aGUgc2VydmVy IGlzIGV4cGVjdGVkIHRvIGNyZWF0ZSB0aGUgZmlsZSB3aXRoDQo+Pj4gYW4gb3duZXJzaGlwIG9m IHRoZSBLZXJiZXJvcyBwcmluY2lwYWwgdXNlZCBpbiB0aGUgUlBDIGNyZWRlbnRpYWxzLg0KPj4+ IA0KPj4+IE5vdywgaWYgeW91IGFyZSBkb2luZyB0aGUgUlBDIGFzIHJvb3QsIHRoYXQgd2lsbCBy ZXN1bHQgaW4gbm9ib2R5IChvcg0KPj4+IGEgZmFpbHVyZSB0byBjcmVhdGUgdGhlIGZpbGUsIGRl cGVuZGluZyB1cG9uIGRpcmVjdG9yeSBwZXJtaXNzaW9ucykuDQo+Pj4gVGhlcmUgaXMgbm8gd2F5 IHRvIGtub3cgd2hhdCB1c2VyIHByaW5jaXBhbCBpcyByZXByZXNlbnRlZCBieSB0aGUNCj4+PiBS UENTRUNfR1NTIGNyZWRlbnRpYWxzLCBzaW5jZSB0aGV5IGFyZSBhIHNob3J0aGFuZCBmb3IgdGhl DQo+Pj4gS2VyYmVyb3MgY3JlZGVudGlhbHMgcHJlc2VudGVkIGluIGEgTnVsbCBSUEMgdGhhdCBo YXBwZW5zDQo+Pj4gd2hlbiB0aGVyZSBpcyBubyBjcmVkZW50aWFsLg0KPj4+IA0KPj4+IFdoZW4g Y3JlYXRpbmcgYSBmaWxlLCB0aGUgdXNlciBjcmVhdGluZyB0aGUgZmlsZSB3aWxsIG5lZWQgdG8g aGF2ZQ0KPj4+IGEgdmFsaWQgVEdUIGluIHRoZSBjbGllbnQncyBjcmVkZW50aWFsIGNhY2hlLg0K Pj4+IA0KPj4+IEFuZCB0aGUgdXNlciBwcmluY2lwYWwgbmFtZSAod2l0aG91dCBAUkVBTE0pIG11 c3QgYmUgYSBuYW1lDQo+Pj4gaW4gdGhlIHBhc3N3ZCBkYXRhYmFzZS4NCj4+PiANCj4+IA0KPj4g QWZ0ZXIgaGF2aW5nIGxldCB0aGlzIGJyZXcgaW4gdGhlIGJhY2sgb2YgbXkgbWluZCBmb3IgYSB3 aGlsZSwgSQ0KPj4gcmVhbGlzZWQgd2hhdCB0aGUgaXNzdWUgd2FzIHRoYW5rcyB0byB5b3UgZXhw bGFpbmluZyB0aGUgdXNlIG9mIHRoZQ0KPj4gcHJpbmNpcGFsIHRvIGZpZ3VyZSBvdXQgdGhlIHVz ZXIuDQo+PiANCj4+IEZvciBvdXIgdXNlY2FzZSwgSSB3YW50ZWQgdG8gb25seSBhdXRoZW50aWNh dGUgdGhlIG1hY2hpbmUgYmVjYXVzZQ0KPj4gdXNlcnMgaGF2ZSBjcm9uam9icyBydW5uaW5nIGlu IHRoZWlyIGhvbWUgZGlyZWN0b3JpZXMsIHVzZXJzIHdhbnQgdG8NCj4+IGFjY2VzcyBlYWNoIG90 aGVyJ3MgZmlsZXMgYW5kIGxvZyBpbiB1c2luZyBTU0gga2V5cy4gSSB3YXMgbW91bnRpbmcNCj4+ IHVzaW5nDQo+PiANCj4+ICAgICAgICAtbyBuZnN2NCxzZWM9a3JiNXAsYWxsZ3NzbmFtZSxnc3Nu YW1lPWhvc3QNCj4+IA0KPj4gdGhpbmtpbmcgdGhhdCBhbGxnc3NuYW1lIHdvdWxkIGFsbG93IHVz ZXJzIHRvIHVzZSB0aGUgbWFjaGluZSdzDQo+PiBwcmluY2lwYWwgYW5kIHRoYXQgb3duZXJzaGlw IGluZm9ybWF0aW9uIHdvdWxkIGJlIHNlbnQgYWxvbmcgd2l0aCB0aGUNCj4+IHJlcXVlc3RzLiBG cm9tIHdoYXQgeW91IHdyb3RlLCBSaWNrLCBJIGdhdGhlciB0aGF0IHRoaXMgY2F1c2VzIGFsbA0K Pj4gdXNlcnMgdG8gYmUgbWFwcGVkIHRvIG5vYm9keSBiZWNhdXNlIHRoZSBtYWNoaW5lJ3MgcHJp bmNpcGFsIGlzIHVzZWQuDQo+IFllcy4gQWxsIGdzc25hbWUgbWVhbnMgdGhhdCB0aGUgImhvc3Qi IGtleXRhYiBlbnRyeSBpcyB1c2VkIGZvciBhbGwgUlBDcy4NCj4gV2hhdCB0aGF0IG1hcHMgdG8g aXMgdXAgdG8gdGhlIE5GUyBzZXJ2ZXIsIGJ1dCAibm9ib2R5IiB3b3VsZCBiZSB0aGUNCj4gdHlw aWNhbCBjYXNlLg0KPiANCj4+IA0KPj4gUmVtb3ZpbmcgYWxsZ3NzbmFtZSBhbmQgZG9pbmcgYSBr aW5pdCBoYXMgdGhpbmdzIHdvcmtpbmcgYXMgZXhwZWN0ZWQNCj4+IHdoZW4gSSBtb3VudCB1c2lu Zw0KPj4gDQo+PiAgICAgICAgLW8gbmZzdjQsc2VjPWtyYjVwLGdzc25hbWU9aG9zdA0KPj4gDQo+ PiBhbmQgbWFrZXMgbWUgb3duIGZpbGVzIEkgY3JlYXRlLg0KPj4gDQo+PiBBbSBJIGNvcnJlY3Qg aW4gdGhpbmtpbmcgdGhhdCBLZXJiZXJvcyBpc24ndCByZWFsbHkgZGVzaWduZWQgdG8gYmUNCj4+ IHVzZWQgZm9yIG9ubHkgYXV0aGVudGljYXRpbmcgdGhlIG1hY2hpbmU/IFVzZXJzIGhhdmluZyB0 byBhbHdheXMgaGF2ZQ0KPj4gdGhlaXIgb3duIHZhbGlkIEtlcmJlcm9zIHRpY2tldCBkb2Vzbid0 IHJlYWxseSB3b3JrIGZvciB1cy4NCj4gWWVzLiBUaGUgImhvc3QiIGtleXRhYiBjcmVkZW50aWFs IGlzIGEgImhhY2siLiBLZXJiZXJvcyBjYWxscyB0aGVtDQo+IHNlcnZpY2UgcHJpbmNpcGFscyBh bmQgdGhleSB3ZXJlIG5vdCBpbnRlbmRlZCB0byBhdXRoZW50aWNhdGUgYSBtYWNoaW5lDQo+IHdo ZW4gS2VyYmVyb3Mgd2FzIGRlc2lnbmVkLg0KPiANCj4gSWYgdXNlcnMgYXJlIHJ1bm5pbmcgY3Jv biBqb2JzLCB0aGVuIG9uZSB3YXkgYXJvdW5kIHRoZSBwcm9ibGVtDQo+IGlzIHRvIGhhdmUgdGhl IEtEQyBpc3N1ZSByZW5ld2FibGUgdGlja2V0cyBhbmQgdGhlbiBydW4gYSBkYWVtb24NCj4gKGNh bid0IHJlbWVtYmVyIHRoZSBuYW1lLCBidXQgaXQgaXMgZWFzeSB0byBmaW5kIGFuZCBvcGVuc291 cmNlZCkNCj4gdGhhdCByZW5ld3MgVEdUcy4gKFRoaXMgb25seSB3b3JrcyB1cCB0byB0aGUgcmVu ZXcgbGltaXQgb2YgdGhlIEtEQw0KPiBjb25maWcuKQ0KPiANCj4gTkZTLW92ZXItVExTIChjYWxs ZWQgUlBDLW92ZXItVExTIGJ5IHRoZSBMaW51eCBmb2xrKSBkb2VzIGFsbG93DQo+IGEgY2xpZW50 IHRvIHByb3ZpZGUgYSBYLjUwOSBjZXJ0aWZpY2F0ZSBkdXJpbmcgVExTIGhhbmRzaGFrZSB0bw0K PiBpZGVudGlmeSB0aGUgY2xpZW50IG1hY2hpbmUgYW5kIHRoZSBUTFMgZW5jcnlwdHMgZXZlcnl0 aGluZyBvbg0KPiB0aGUgd2lyZSB0byBhdm9pZCBtaWRkbGVtYW4gYXR0YWNrcyBvciBzbm9vcGVy cy4NCj4gSXQgZG9lcyBub3QgaWRlbnRpZnkgdXNlcnMgb24gdGhlIHNlcnZlciwgdW5sZXNzIFRM UyBpZGVudGl0eQ0KPiBzcXVhc2hpbmcgaXMgdXNlZCB2aWEgdGhlIFguNTA5IGNlcnRpZmljYXRl IHRvIG1ha2UgYWxsIFJQQ3MNCj4gZG9uZSBieSBhIHVzZXIuIChUaGlzIGhhcyB0aGUgYWR2YW50 YWdlIHRoYXQgaXQgaXMgbm90ICJub2JvZHkiLA0KPiBidXQgaXMgb25seSB1c2VmdWwgZm9yIHRo aW5ncyBsaWtlIGxhcHRvcHMsIHRoYXQgYXJlIG9ubHkgdXNlZCBieQ0KPiBvbmUgdXNlci4gSXQg ZG9lcyBoYXZlIHRoZSBhZHZhbnRhZ2UgdGhhdCB0aGVyZSBhcmUgbm8gdGlja2V0cw0KPiB0byBl eHBpcmUsIGFsdGhvdWdoIHRoZXJlIGlzIGEsIHVzdWFsbHkgbG9uZywgZXhwaXJhdGlvbiBvbiB0 aGUgWC41MDkNCj4gY2VydGlmaWNhdGUuKQ0KPiANCj4gcmljaw0KPiANCg0KQmFjayB3aGVuIEtl cmJlcm9zIHdhcyBkZXNpZ25lZCBrZXJiZXJpemVkIE5GUyBzZXJ2ZXJzIGhhZCBhIHRhYmxlIG1h cHBpbmcgY2xpZW50IGFkZHJlc3MgYW5kIHVzZXJpZCB0byBzZXJ2ZXIgdXNlcmlkLiAgVGhlIHRh YmxlIHdhcyBtYW5hZ2VkIGJ5IGEgZGFlbW9uIHRvIHdoaWNoIHVzZXJzIHNlbnQgS2VyYmVyb3Mg dGlja2V0cyBmb3IgdGhlIE5GUyBzZXJ2aWNlLiAgSXQgbWlnaHQgaGF2ZSBiZWVuIGEgaGFja2Vk IHJwYy5tb3VudGQuICBDbGllbnQgTkZTIHJlcXVlc3RzIHVzZWQgQVVUSF9VTklYLCB1c2VyaWQg YW5kIGdyb3VwIGxpc3QuICAgVGhlIHVzZXJpZCB3YXMgY2hlY2tlZCBpbiB0aGUgdGFibGUgaW5z dGVhZCBvZiBiZWluZyBibGluZGx5IHRydXN0ZWQuICBBcyB3YXMgdHlwaWNhbCBiYWNrIHRoZW4s IHRoZSB3aXJlIGNvbm5lY3Rpb24gd2FzIHVuZW5jcnlwdGVkLiAgSSB0aGluayBhY3RpdmUgdXNl cnMgb24gdGhlIHNhbWUgc3VibmV0IHdlcmUgcG90ZW50aWFsbHkgdnVsbmVyYWJsZSB0byBpbXBl cnNvbmF0aW9uLiAgKEF0IE1JVCBhIHN1Ym5ldCB3YXMgYXBwcm94aW1hdGVseSBhIHNtYWxsIGJ1 aWxkaW5nIG9yIGEgZmV3IGZsb29ycyBvZiBhIGxhcmdlIG9uZS4pICAgVGhlIGNvbmNlcHQgc2hv dWxkIHdvcmsgYmV0dGVyIG92ZXIgYW4gZW5jcnlwdGVkIGNvbm5lY3Rpb24uDQoNCkpvaG4gQ2Fy cg0KDQo=
Want to link to this message? Use this URL: <https://mail-archive.FreeBSD.org/cgi/mid.cgi?5BBB7631-B992-4682-8D9C-144073CA64C6>