From 9819573c496d8d3acbfa97ca9fb25b977ed5b7ac Mon Sep 17 00:00:00 2001 From: Simo Sorce Date: Wed, 19 Jun 2013 11:41:29 -0400 Subject: [PATCH] Split nfs server and client services The NFS server uses a special socket for the kernel communication. Split configuration in 2 distinct services so we can use specific options that may be different between server and client. The 3 main differences so far are: 1. socket: default for client, custom for server 2. kernel_nfd option only for server 3. ccache and client keytab options only for client Signed-off-by: Simo Sorce --- proxy/examples/gssproxy.conf.in | 11 ++++++++--- 1 file changed, 8 insertions(+), 3 deletions(-) diff --git a/proxy/examples/gssproxy.conf.in b/proxy/examples/gssproxy.conf.in index b30d39ac74a8d6c7f3e77c6461e8aff44fd29fc9..0f8339e805629cf6e2cb0cd5fc0fe73cbf10aa25 100644 --- a/proxy/examples/gssproxy.conf.in +++ b/proxy/examples/gssproxy.conf.in @@ -1,12 +1,17 @@ [gssproxy] -[service/nfs] +[service/nfs-server] mechs = krb5 socket = /run/gssproxy.sock cred_store = keytab:/etc/krb5.keytab + trusted = yes + kernel_nfsd = yes + euid = 0 + +[service/nfs-client] + mechs = krb5 + cred_store = keytab:/etc/krb5.keytab cred_store = ccache:FILE:@gpstatedir@/clients/krb5cc_%U cred_store = client_keytab:@gpstatedir@/clients/%U.keytab trusted = yes - kernel_nfsd = yes euid = 0 - -- 1.8.1.4