• Chuck Lever's avatar
    SUNRPC: Add /proc/net/rpc/gss_krb5_enctypes file · bdb12fb1
    Chuck Lever authored
    I would like to replace the KRB5_SUPPORTED_ENCTYPES macro so that
    there is finer granularity about what enctype support is built in
    to the kernel and then advertised by it.
    
    The /proc/fs/nfsd/supported_krb5_enctypes file is a legacy API
    that advertises supported enctypes to rpc.svcgssd (I think?). It
    simply prints the value of the KRB5_SUPPORTED_ENCTYPES macro, so it
    will need to be replaced with something that can instead display
    exactly which enctypes are configured and built into the SunRPC
    layer.
    
    Completely decommissioning such APIs is hard. Instead, add a file
    that is managed by SunRPC's GSS Kerberos mechanism, which is
    authoritative about enctype support status. A subsequent patch will
    replace /proc/fs/nfsd/supported_krb5_enctypes with a symlink to this
    new file.
    Tested-by: default avatarScott Mayhew <smayhew@redhat.com>
    Reviewed-by: default avatarSimo Sorce <simo@redhat.com>
    Signed-off-by: default avatarChuck Lever <chuck.lever@oracle.com>
    bdb12fb1
svcauth_gss.c 51.5 KB