Groups | Search | Server Info | Keyboard shortcuts | Login | Register [http] [https] [nntp] [nntps]

Groups > linux.debian.kernel > #57286

Bug#852395: unblock: gssproxy/0.5.1-2

Cross-posted to 3 groups.

Show all headers | View raw

[Multipart message — attachments visible in raw view] - view raw

On Sun, Mar 05 2017, Daniel Pocock wrote:

> On 05/03/17 19:42, Niels Thykier wrote:
>> On Sat, 04 Feb 2017 09:58:00 +0000 Niels Thykier <niels@thykier.net> wrote:
>>> Daniel Pocock:
>>>> [...]
>>>>
>>>> Upstream is not really supporting rpc.svcgssd any more, they actually
>>>> disabled it in the build so people can still have it as a transitional
>>>> measure in stretch.
>>>>
>>>> People shouldn't be using it in any new installations.  Offering them
>>>> gssproxy is a very sensible thing to do.
>>>>
>>>> Regards,
>>>>
>>>> Daniel
>>>>
>>> Debian kernel team <debian-kernel@lists.debian.org>
>>> Ok, follow up questions:
>>>
>>>  * Do you have an upstream reference to the state of rpc.svcgssd?
>
>
> http://git.linux-nfs.org/?p=steved/nfs-utils.git;a=commit;h=24b5d60d7f0a514310df810e3eb27b72f665febf
>
> "svcgssd: Disable support for the rpcsec_gss server by default
>
> At this point the gssproxy is better option than the
> svcgssd so the support is off by default.
>
> Use --enable-svcgss to re-enable the support"
>
> but it looks like it may not be completely abandoned, there have been
> other commits that mention gssd recently.
>
>
>>>
>>>  * Can we provide both rpc.svcgssd and gssproxy in Debian (with the
>>>    admin choosing) or is it an "xor"?
>>>
>
> I think there are two questions:
>
> a) can they both exist in different packages that conflict with each
> other?  I'm guessing that will probably be yes.
>
> b) can they both be installed simultaneously?  Possibly not (can anybody
> on the linux-nfs list answer?)

Yes, they can.
The systemd unit files are designed so that svcgssd will only be started
if gssproxy didn't start - and gssproxy is tried first.

If you use something other than systemd, similar logic would be needed.

NeilBrown


>
>
>>>  * If this package is unblocked, are there any changes needed in
>>>    nfs-common needed to support gssproxy?  (source upload, binNMU or
>>>    "just works with no further changes")
>>>
>
> I don't have time to investigate that right now, if anybody else has
> time to look more closely that would be great.
>
> Regards,
>
> Daniel
> --
> To unsubscribe from this list: send the line "unsubscribe linux-nfs" in
> the body of a message to majordomo@vger.kernel.org
> More majordomo info at  http://vger.kernel.org/majordomo-info.html

Back to linux.debian.kernel | Previous | Next — Previous in thread | Next in thread | Find similar | Unroll thread

Thread

Bug#852395: unblock: gssproxy/0.5.1-2 Niels Thykier <niels@thykier.net> - 2017-02-04 11:00 +0100
  Bug#852395: unblock: gssproxy/0.5.1-2 Daniel Pocock <daniel@pocock.pro> - 2017-02-04 11:00 +0100
    Bug#852395: unblock: gssproxy/0.5.1-2 Niels Thykier <niels@thykier.net> - 2017-02-04 11:10 +0100
      Bug#852395: unblock: gssproxy/0.5.1-2 Niels Thykier <niels@thykier.net> - 2017-03-05 19:50 +0100
        Bug#852395: unblock: gssproxy/0.5.1-2 Daniel Pocock <daniel@pocock.pro> - 2017-03-05 20:20 +0100
          Bug#852395: unblock: gssproxy/0.5.1-2 NeilBrown <neilb@suse.com> - 2017-03-20 06:30 +0100
            Bug#852395: unblock: gssproxy/0.5.1-2 Niels Thykier <niels@thykier.net> - 2017-04-05 12:50 +0200
              Bug#852395: unblock: gssproxy/0.5.1-2 Robbie Harwood <rharwood@club.cc.cmu.edu> - 2017-04-06 01:50 +0200
                Bug#852395: unblock: gssproxy/0.5.1-2 Niels Thykier <niels@thykier.net> - 2017-04-09 21:50 +0200
                Bug#852395: unblock: gssproxy/0.5.1-2 Robbie Harwood <rharwood@club.cc.cmu.edu> - 2017-04-11 07:40 +0200

csiph-web