• O
    nfsd: pass client principal name in rsc downcall · 68e76ad0
    Olga Kornievskaia 提交于
    Two principals are involved in krb5 authentication: the target, who we
    authenticate *to* (normally the name of the server, like
    nfs/server.citi.umich.edu@CITI.UMICH.EDU), and the source, we we
    authenticate *as* (normally a user, like bfields@UMICH.EDU)
    
    In the case of NFSv4 callbacks, the target of the callback should be the
    source of the client's setclientid call, and the source should be the
    nfs server's own principal.
    
    Therefore we allow svcgssd to pass down the name of the principal that
    just authenticated, so that on setclientid we can store that principal
    name with the new client, to be used later on callbacks.
    Signed-off-by: NOlga Kornievskaia <aglo@citi.umich.edu>
    Signed-off-by: NJ. Bruce Fields <bfields@citi.umich.edu>
    Signed-off-by: NTrond Myklebust <Trond.Myklebust@netapp.com>
    68e76ad0
state.h 10.9 KB