Re: FreeBSD NFSv4 server: -sec=none / AUTH_NONE supported?

From: Cedric Blancher <cedric.blancher_at_gmail.com>
Date: Fri, 22 Aug 2025 13:56:21 UTC
On Fri, 22 Aug 2025 at 15:44, Rick Macklem <rick.macklem@gmail.com> wrote:
>
> On Fri, Aug 22, 2025 at 6:36 AM Cedric Blancher
> <cedric.blancher@gmail.com> wrote:
> >
> > On Fri, 22 Aug 2025 at 15:30, Rick Macklem <rick.macklem@gmail.com> wrote:
> > >
> > > On Fri, Aug 22, 2025 at 3:07 AM Cedric Blancher
> > > <cedric.blancher@gmail.com> wrote:
> > > >
> > > > Good morning!
> > > >
> > > > Does the FreeBSD 14 NFSv4 server support -sec=none / AUTH_NONE
> > > > supported, i.e. for ftp archives etc?
> > > Nope. Not at this time, rick
> >
> > I've only seen client side patches for libtirpc, which just swaped out
> > auth_sys(uid, gid) with auth_none() (no arguments!) ... this should
> > not be too hard on the server side, right?
> Not too much work. Basically adding a flag on the export related structure
> assigned to an RPC being processed for it and checking that flag at the
> appropriate times.
>
> To be honest, until now, no one has asked for it.

Solaris has it, and it is (Sarcasm) so "unimportant" that the Windows
NFS driver got that a while ago too:
https://github.com/kofemann/ms-nfs41-client/commit/d7272e769e6ad31ef83ffab39b8dbea2b71b9c44

This is mostly used for ftp sizes, or exporting ftp sites via nfs://
Windows uses this for single-user exports.

> As such, it might be in 15.1. (I think it can be done during a minor
> release update.)

Thanks

Ced
-- 
Cedric Blancher <cedric.blancher@gmail.com>
[https://plus.google.com/u/0/+CedricBlancher/]
Institute Pasteur