Project

General

Profile

Bug #1609

nfs-utils lacks /usr/sbin/rpc.gssd

Added by Stanislav Paskalev over 6 years ago. Updated about 6 years ago.

Status:
Closed
Priority:
Normal
Assignee:
Category:
Aports
Target version:
Start date:
02/11/2013
Due date:
04/01/2013
% Done:

100%

Estimated time:
Affected versions:
Security IDs:

Description

I'm currently running alpine, trying to setup a kerberos-authenticated nfs server. However, the nfs-utils package lacks the rpc.gssd binary. It has the init.d script for it, and the script fails as well.

Associated revisions

Revision 5353878b (diff)
Added by Natanael Copa over 6 years ago

main/nfs-utils: remove unsupported gssd.initd

We currently don't support gssd.

ref #1609

Revision 00e29c1e (diff)
Added by Natanael Copa about 6 years ago

testing/krb5: new aport

The Kerberos network authentication system
http://web.mit.edu/kerberos/www/

ref #1609

Revision b8fda33b (diff)
Added by Natanael Copa about 6 years ago

main/libtirpc: upgrade to 0.2.3 and switch to MIT krb

ref #1609

Revision 52d7d033 (diff)
Added by Natanael Copa about 6 years ago

main/nfs-utils: upgrade to 1.2.8 and switch to MIT krb

fixes #1609

History

#1 Updated by Natanael Copa over 6 years ago

  • Category set to Aports
  • Assignee set to Natanael Copa
  • Target version set to Alpine 2.6.0

#2 Updated by Natanael Copa over 6 years ago

Ok, I looked a bit at this issue.

Currently we build nfs-utils without gssd so the init.d script should been there in first place.

I tried to enable gssd but it is a bit messy because libgssglue and heimdal does not go well together. Both provide a gssapi.h file and they get mixed up.

I think we have 2 alternatives:
  1. remove heimdal alltogether and switch to MIT kerberos
  2. patch libtirpc and nfs-utils to work with heimdal

I'm not sure what is the best way forward. It seems like most distros have abandoned heimdal and switched to MIT kerberos. There are patches to make libtirpc1 and nfs-utils2 work with nfs-utils.

It shouldn't be a too big job replacing heimdal with MIT kerberos. The packages that uses heimdal-dev are:
  • main/dovecot
  • main/pidgin-sipe
  • main/samba
  • main/squid
  • testing/apache-mod-auth-kerb

1 http://cvs.pld-linux.org/cgi-bin/viewvc.cgi/cvs/packages/libtirpc/

2 http://cvs.pld-linux.org/cgi-bin/viewvc.cgi/cvs/packages/nfs-utils/

#3 Updated by Stanislav Paskalev over 6 years ago

Please consider supporting both :) Debian seems to be able to do it.

Also, it appears that samba4 has some nice integration with heimdal, in order to allow it's use as an Active Directory controller.

#4 Updated by Natanael Copa about 6 years ago

  • Due date set to 04/01/2013

#5 Updated by Natanael Copa about 6 years ago

  • Status changed from New to Resolved
  • % Done changed from 0 to 100

#6 Updated by Natanael Copa about 6 years ago

  • Status changed from Resolved to Closed

Also available in: Atom PDF