]> git.neil.brown.name Git - history.git/commit
[PATCH] RPCSEC_GSS authentication framework [4/6]
authorTrond Myklebust <trond.myklebust@fys.uio.no>
Mon, 13 Jan 2003 05:41:33 +0000 (21:41 -0800)
committerLinus Torvalds <torvalds@penguin.transmeta.com>
Mon, 13 Jan 2003 05:41:33 +0000 (21:41 -0800)
commit8d188768b6a1b5692994c02539c801aad888b555
tree52b74b89d50537eea26d314abd89483d191382cb
parentaf2f003391786fb632889c02142c941b212ba4ff
[PATCH] RPCSEC_GSS authentication framework [4/6]

This patch provides the basic framework for RPCSEC_GSS authentication
in the RPC client. The protocol is fully described in RFC-2203.
Sun has supported it in their commercial NFSv3 and v2 implementations
for quite some time, and it has been specified in RFC3010 as being
mandatory for NFSv4.

  - Update the mount_data struct for NFSv2 and v3 in order to allow them
    to pass an RPCSEC_GSS security flavour. Compatibility with existing
    versions of the 'mount' program is ensured by requiring that RPCSEC
    support be enabled using the new flag NFS_MOUNT_SECFLAVOUR.
  - Provide secure authentication, and later data encryption on
    a per-user basis. A later patch will an provide an implementation
    of the Kerberos 5 security mechanism. SPKM and LIPKEY are still
    being planned.
  - Security context negotiation and initialization are all assumed
    to be done in userland. A later patch will provide the actual upcall
    mechanisms to allow for this.
23 files changed:
fs/Kconfig
fs/nfs/inode.c
include/linux/nfs_mount.h
include/linux/sunrpc/auth.h
include/linux/sunrpc/auth_gss.h [new file with mode: 0644]
include/linux/sunrpc/gss_api.h [new file with mode: 0644]
include/linux/sunrpc/gss_asn1.h [new file with mode: 0644]
include/linux/sunrpc/gss_err.h [new file with mode: 0644]
include/linux/sunrpc/msg_prot.h
include/linux/sunrpc/sched.h
include/linux/sunrpc/xdr.h
net/sunrpc/Makefile
net/sunrpc/auth.c
net/sunrpc/auth_gss/Makefile [new file with mode: 0644]
net/sunrpc/auth_gss/auth_gss.c [new file with mode: 0644]
net/sunrpc/auth_gss/gss_generic_token.c [new file with mode: 0644]
net/sunrpc/auth_gss/gss_mech_switch.c [new file with mode: 0644]
net/sunrpc/auth_gss/gss_pseudoflavors.c [new file with mode: 0644]
net/sunrpc/auth_gss/sunrpcgss_syms.c [new file with mode: 0644]
net/sunrpc/auth_null.c
net/sunrpc/auth_unix.c
net/sunrpc/clnt.c
net/sunrpc/sunrpc_syms.c