Package: nfs-common Version: 1:1.0.10-5tkk1 Severity: normal Tags: patch
Currently root UID on krb5-mounts is mapped as nobody, and upstream knows about this: http://linux-nfs.org/pipermail/nfsv4/2006-December/005454.html Linked is a patch, described by the author: "Use root/[EMAIL PROTECTED] principal instead of nfs/[EMAIL PROTECTED] for machine credentials until Linux NFSv4 guys get their act [#1] sorted out.. AFAIK this behaviour is identical to Solaris 10 client. This patch is pretty much necessary if you're not using a Linux based NFSv4 server and idmapd with umich_ldap method to handle principal mapping. Tested against NetApp's file server, the root access works fine after applying the patch." http://users.tkk.fi/~aet/nfs-utils-1.0.9.patch.aet We've been running this patch for over a month now on several clients, and it works. AFAIK, it doesn't affect nfs-server at all, since rpc.svcgssd doesn't use gssd/krb5_util.*, but we might be wrong since we don't use nfs-server on linux. ps. yes, we use Ubuntu, but this needs to get in Debian first :) -- System Information: Debian Release: testing/unstable APT prefers dapper-updates APT policy: (500, 'dapper-updates'), (500, 'dapper-security'), (500, 'dapper-backports'), (500, 'dapper') Architecture: i386 (i686) Shell: /bin/sh linked to /bin/dash Kernel: Linux 2.6.15-27-686 Locale: LANG=C, LC_CTYPE=fi_FI.ISO8859-1 (charmap=ISO-8859-1) Versions of packages nfs-common depends on: ii adduser 3.80ubuntu2 Add and remove users and groups ii libc6 2.3.6-0ubuntu20 GNU C Library: Shared libraries an ii libcomerr2 1.38-2ubuntu2 common error description library ii libevent1 1.1a-1 An asynchronous event notification ii libgssapi2 0.10-4 A mechanism-switch gssapi library ii libkrb53 1.4.4-4tkk1 MIT Kerberos runtime libraries ii libnfsidmap2 0.18-0 An nfs idmapping library ii librpcsecgss3 0.14-2 allows secure rpc communication us ii lsb-base 3.1-5ubuntu2 Linux Standard Base 3.1 init scrip ii netbase 4.24ubuntu3 Basic TCP/IP networking system ii portmap 5-16ubuntu2 The RPC portmapper ii ucf 2.004 Update Configuration File: preserv nfs-common recommends no packages. -- no debconf information -- To UNSUBSCRIBE, email to [EMAIL PROTECTED] with a subject of "unsubscribe". Trouble? Contact [EMAIL PROTECTED]
