adding "-manage-gids" option to the NFS server

Rick Macklem rmacklem at uoguelph.ca
Sun Nov 15 22:41:38 UTC 2015


Hi,

The attached 3 patches add the "-manage-gids" option to the NFS server.
When enabled, for AUTH_SYS RPC requests, the server will use the list of
groups that are assigned to the uid on the server instead of the list of
gids in the RPC request.

This can be used to avoid the limit of 16 groups in the RPC header.

It does require that the NFS server be configured with the same passwd and
group databases as the NFS client(s). It uses getgrouplist(3) on the server
to get the group list, so that must work correctly on the server.
It uses the same cache as the name<->id cache used for NFSv4. As such,
the option is on the nfsuserd command line and it must be running for this
to work for NFSv3 and/or NFSv4.

Josh Paetzel already asked if this option was reasonable and got a positive
response.

Please review and/or test these patches, rick
ps: I tried to put them in reviews.freebsd.org, but failed miserably, so
    I've attached them here.
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mapgrp-rc.patch
Type: text/x-patch
Size: 1602 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-fs/attachments/20151115/596607d2/attachment.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mapgrp-nfsuserd.patch
Type: text/x-patch
Size: 7745 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-fs/attachments/20151115/596607d2/attachment-0001.bin>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mapgrp-kernel.patch
Type: text/x-patch
Size: 34912 bytes
Desc: not available
URL: <http://lists.freebsd.org/pipermail/freebsd-fs/attachments/20151115/596607d2/attachment-0002.bin>


More information about the freebsd-fs mailing list