nfs-utils README updates

nfs-utils README updates

[Doug Nazar]

I was looking through the README to ensure my systems followed the 
correct setup and noticed a few things.

Looks like the reference to libnfsidmap can be dropped.

It looks like nfsdcld is again the correct setup for client tracking. A 
section should be added to SERVER STARTUP to include nfsdcld on NFS4+ 
servers.

Should it mention which modules are required before starting? I've had 
to locally add 'auth_rpcgss' to my startup scripts or svcgssd will bail 
on startup.

Any other changes or best practices that should be mentioned before I 
send a patch?

Thanks,
Doug

Re: nfs-utils README updates

[Steve Dickson]

Hey Doug,

On 7/16/20 5:36 PM, Doug Nazar wrote:
> I was looking through the README to ensure my systems followed the correct setup and noticed a few things.
> 
> Looks like the reference to libnfsidmap can be dropped.
> 
> It looks like nfsdcld is again the correct setup for client tracking. A section should be added to SERVER STARTUP to include nfsdcld on NFS4+ servers.
> 
> Should it mention which modules are required before starting? I've had to locally add 'auth_rpcgss' to my startup scripts or svcgssd will bail on startup.
> 
> Any other changes or best practices that should be mentioned before I send a patch?

Yes... the README is dreadfully out of date... although most of it has
not changed but a lot has... esp when it comes to the systemd set up..
although the systemd/README is pretty accurate... Maybe a point to
the systemd/README in the top README would be good. 

What script did you have to add 'auth_rpcgss' to? 
It should be automatically  be loaded when the sunrpc 
module is loaded.

Thanks for taking a look!

steved.

 

Re: nfs-utils README updates

[J. Bruce Fields]

On Fri, Jul 17, 2020 at 01:34:03PM -0400, Steve Dickson wrote:
> Hey Doug,
> 
> On 7/16/20 5:36 PM, Doug Nazar wrote:
> > I was looking through the README to ensure my systems followed the correct setup and noticed a few things.
> > 
> > Looks like the reference to libnfsidmap can be dropped.
> > 
> > It looks like nfsdcld is again the correct setup for client tracking. A section should be added to SERVER STARTUP to include nfsdcld on NFS4+ servers.
> > 
> > Should it mention which modules are required before starting? I've had to locally add 'auth_rpcgss' to my startup scripts or svcgssd will bail on startup.
> > 
> > Any other changes or best practices that should be mentioned before I send a patch?
> 
> Yes... the README is dreadfully out of date... although most of it has
> not changed but a lot has... esp when it comes to the systemd set up..
> although the systemd/README is pretty accurate... Maybe a point to
> the systemd/README in the top README would be good. 
> 
> What script did you have to add 'auth_rpcgss' to? 
> It should be automatically  be loaded when the sunrpc 
> module is loaded.

Yes, looking at that out of curiosity... there's a request_module() in
net/sunrpc/auth.c that should be trying to load "rpc-auth-6".  Together
with the MODULE_ALIAS("rpc-auth-6") in net/sunrpc/auth_gss/auth_gss.c,
that should make this automatic.

--b.

Re: nfs-utils README updates

[Doug Nazar]

On 2020-07-17 13:34, Steve Dickson wrote:

> Yes... the README is dreadfully out of date... although most of it has
> not changed but a lot has... esp when it comes to the systemd set up..
> although the systemd/README is pretty accurate... Maybe a point to
> the systemd/README in the top README would be good.

Sure, although I don't use systemd myself, I'll have to trust it's correct.

> What script did you have to add 'auth_rpcgss' to?
> It should be automatically  be loaded when the sunrpc
> module is loaded.

/etc/init.d/rpc.svcgssd (on Gentoo).

Looking into it, looks like sunrpc is included & loaded from the 
initramfs that Gentoo's 'genkernel' creates (for root nfs setups) but 
not the auth_rpcgss or rpcsec_gss_krb5 modules. Which makes some sense, 
since i can't think of an easy way to do a krb5 root fs with a generic 
initramfs. Kind of a chicken-egg issue with getting kerberos initialized.

I suppose the other option is to allow svcgssd to startup and wait for 
that file to appear. I already have patches that convert it to use 
libevent so that shouldn't be too much work to add.

Doug