Re: [PATCH] Add "-e" option to rpc.gssd to allow error on ticketexpiry. Try 2 with added man pages.

From: Trond Myklebust
Date: Fri Nov 18 2011 - 13:35:35 EST


On Fri, 2011-11-18 at 15:34 +0100, John Hughes wrote:
> Description: Add "-e" (ticket expiry is error) option to rpc.gssd
> In kernels starting around 2.6.34 the nfs4 server will block all I/O
> when a user ticket expires. In earlier kernels the I/O would fail
> with an EACCESS error. This patch adds a "-e" option to rpc.gssd
> which allow the earlier behaviour (EKEYEXPIRED is converted to
> EACCESS). This behaviour is particularly useful when user home
> directories are nfs4 mounted with krb5 security - if the user is
> absent from their workstation for long enough for the ticket to
> expire a new ticket will be obtained (via pam_krb5) by the screen
> unlock process.

You need a big fat warning somewhere that enabling this option WILL
cause data corruption...

Trond
--
Trond Myklebust
Linux NFS client maintainer

NetApp
Trond.Myklebust@xxxxxxxxxx
www.netapp.com

--
To unsubscribe from this list: send the line "unsubscribe linux-kernel" in
the body of a message to majordomo@xxxxxxxxxxxxxxx
More majordomo info at http://vger.kernel.org/majordomo-info.html
Please read the FAQ at http://www.tux.org/lkml/