Changes in Makefile

d0b2dbfa - Remove $FreeBSD$: one-line sh pattern

Wed, 16 Aug 2023 17:55:03 +0000

Remove $FreeBSD$: one-line sh patternRemove /^\s*#[#!]?\s*\$FreeBSD\$.*$\n/ List of files: /freebsd-14.2/usr.sbin/gssd/Makefile

a30235a4 - pkgbase: Create a FreeBSD-kerberos package

Thu, 02 Sep 2021 04:09:15 +0000

pkgbase: Create a FreeBSD-kerberos packageThis allows users to install or not kerberos related utilitiesand libs.Differential Revision: https://reviews.freebsd.org/D31801 List of files: /freebsd-14.2/usr.sbin/gssd/Makefile

64a0982b - usr.sbin: normalize paths using SRCTOP-relative paths or :H when possible

Sat, 04 Mar 2017 11:38:03 +0000

usr.sbin: normalize paths using SRCTOP-relative paths or :H when possibleThis simplifies make logic/outputMFC after: 1 monthSponsored by: Dell EMC Isilon List of files: /freebsd-14.2/usr.sbin/gssd/Makefile

1227447a - Add an auto-generated file to CLEANFILES.

Fri, 13 Feb 2015 18:34:04 +0000

Add an auto-generated file to CLEANFILES.MFC after: 3 daysSponsored by: EMC / Isilon Storage Division List of files: /freebsd-14.2/usr.sbin/gssd/Makefile

c6db8143 - Convert usr.sbin to LIBADD

Tue, 25 Nov 2014 16:57:27 +0000

Convert usr.sbin to LIBADDReduce overlinking List of files: /freebsd-14.2/usr.sbin/gssd/Makefile

c6063d0d - Use src.opts.mk in preference to bsd.own.mk except where we need stuff

Tue, 06 May 2014 04:22:01 +0000

Use src.opts.mk in preference to bsd.own.mk except where we need stufffrom the latter. List of files: /freebsd-14.2/usr.sbin/gssd/Makefile

8ac5ae56 - Fix r244604 so that it builds when MK_KERBEROS_SUPPORT == "no".

Thu, 03 Jan 2013 22:24:39 +0000

Fix r244604 so that it builds when MK_KERBEROS_SUPPORT == "no".Reported by: bfTested by: bfReviewed by: gcooperMFC after: 3 days List of files: /freebsd-14.2/usr.sbin/gssd/Makefile

7dbcc85c - Fix the Makefile so it can build gssd.c after r244604.

Sun, 23 Dec 2012 20:12:57 +0000

Fix the Makefile so it can build gssd.c after r244604.MFC after: 2 weeks List of files: /freebsd-14.2/usr.sbin/gssd/Makefile

5e0a19bd - Consistently set RPCGEN_CPP when running rpcgen, so the C preprocessor

Tue, 07 Feb 2012 09:27:07 +0000

Consistently set RPCGEN_CPP when running rpcgen, so the C preprocessorset via ${CPP} is used, instead of always using hardcoded /usr/bin/cpp.MFC after: 1 week List of files: /freebsd-14.2/usr.sbin/gssd/Makefile

557fe261 - Add gssd.h to the list of SRCS so one can build without 'make depend' first.

Tue, 30 Dec 2008 01:33:15 +0000

Add gssd.h to the list of SRCS so one can build without 'make depend' first. List of files: /freebsd-14.2/usr.sbin/gssd/Makefile

a9148abd - Implement support for RPCSEC_GSS authentication to both the NFS client

Mon, 03 Nov 2008 10:38:00 +0000

Implement support for RPCSEC_GSS authentication to both the NFS clientand server. This replaces the RPC implementation of the NFS client andserver with the newer RPC implementation originally developed(actually ported from the userland sunrpc code) to support the NFSLock Manager. I have tested this code extensively and I believe it isstable and that performance is at least equal to the legacy RPCimplementation.The NFS code currently contains support for both the new RPCimplementation and the older legacy implementation inherited from theoriginal NFS codebase. The default is to use the new implementation -add the NFS_LEGACYRPC option to fall back to the old code. When Imerge this support back to RELENG_7, I will probably change this sothat users have to 'opt in' to get the new code.To use RPCSEC_GSS on either client or server, you must build a kernelwhich includes the KGSSAPI option and the crypto device. On theuserland side, you must build at least a new libc, mountd, mount_nfsand gssd. You must install new versions of /etc/rc.d/gssd and/etc/rc.d/nfsd and add 'gssd_enable=YES' to /etc/rc.conf.As long as gssd is running, you should be able to mount an NFSfilesystem from a server that requires RPCSEC_GSS authentication. Themount itself can happen without any kerberos credentials but allaccess to the filesystem will be denied unless the accessing user hasa valid ticket file in the standard place (/tmp/krb5cc_). Thereis currently no support for situations where the ticket file is in adifferent place, such as when the user logged in via SSH and hasdelegated credentials from that login. This restriction is alsopresent in Solaris and Linux. In theory, we could improve this infuture, possibly using Brooks Davis' implementation of variantsymlinks.Supporting RPCSEC_GSS on a server is nearly as simple. You must createservice creds for the server in the form 'nfs/@' andinstall them in /etc/krb5.keytab. The standard heimdal utility ktutilmakes this fairly easy. After the service creds have been created, youcan add a '-sec=krb5' option to /etc/exports and restart both mountdand nfsd.The only other difference an administrator should notice is that nfsddoesn't fork to create service threads any more. In normal operation,there will be two nfsd processes, one in userland waiting for TCPconnections and one in the kernel handling requests. The latterprocess will create as many kthreads as required - these should bevisible via 'top -H'. The code has some support for varying the numberof service threads according to load but initially at least, nfsd usesa fixed number of threads according to the value supplied to its '-n'option.Sponsored by: Isilon SystemsMFC after: 1 month List of files: /freebsd-14.2/usr.sbin/gssd/Makefile