Re: [nfsv4] Path forward for flex-files

Rick Macklem <rmacklem@uoguelph.ca> Mon, 07 August 2017 19:19 UTC

Return-Path: <rmacklem@uoguelph.ca>
X-Original-To: nfsv4@ietfa.amsl.com
Delivered-To: nfsv4@ietfa.amsl.com
Received: from localhost (localhost [127.0.0.1]) by ietfa.amsl.com (Postfix) with ESMTP id 59D86132676 for <nfsv4@ietfa.amsl.com>; Mon, 7 Aug 2017 12:19:14 -0700 (PDT)
X-Virus-Scanned: amavisd-new at amsl.com
X-Spam-Flag: NO
X-Spam-Score: -1.901
X-Spam-Level:
X-Spam-Status: No, score=-1.901 tagged_above=-999 required=5 tests=[BAYES_00=-1.9, RCVD_IN_DNSWL_NONE=-0.0001, SPF_PASS=-0.001] autolearn=ham autolearn_force=no
Received: from mail.ietf.org ([4.31.198.44]) by localhost (ietfa.amsl.com [127.0.0.1]) (amavisd-new, port 10024) with ESMTP id GfPx9wzlteAp for <nfsv4@ietfa.amsl.com>; Mon, 7 Aug 2017 12:19:12 -0700 (PDT)
Received: from CAN01-TO1-obe.outbound.protection.outlook.com (mail-eopbgr670044.outbound.protection.outlook.com [40.107.67.44]) (using TLSv1.2 with cipher ECDHE-RSA-AES256-SHA384 (256/256 bits)) (No client certificate requested) by ietfa.amsl.com (Postfix) with ESMTPS id 565B51325E1 for <nfsv4@ietf.org>; Mon, 7 Aug 2017 12:19:12 -0700 (PDT)
Received: from YTXPR01MB0189.CANPRD01.PROD.OUTLOOK.COM (10.165.218.133) by YTXPR01MB0192.CANPRD01.PROD.OUTLOOK.COM (10.165.218.136) with Microsoft SMTP Server (version=TLS1_2, cipher=TLS_ECDHE_RSA_WITH_AES_256_CBC_SHA384_P256) id 15.1.1320.16; Mon, 7 Aug 2017 19:19:10 +0000
Received: from YTXPR01MB0189.CANPRD01.PROD.OUTLOOK.COM ([10.165.218.133]) by YTXPR01MB0189.CANPRD01.PROD.OUTLOOK.COM ([10.165.218.133]) with mapi id 15.01.1320.018; Mon, 7 Aug 2017 19:19:10 +0000
From: Rick Macklem <rmacklem@uoguelph.ca>
To: Olga Kornievskaia <aglo@citi.umich.edu>
CC: "nfsv4@ietf.org" <nfsv4@ietf.org>, David Noveck <davenoveck@gmail.com>, Thomas Haynes <loghyr@primarydata.com>
Thread-Topic: [nfsv4] Path forward for flex-files
Thread-Index: AQHTDvcuyDK3wnPfo0qo8KfOQeaI76J5D2eAgAAy6Qo=
Date: Mon, 07 Aug 2017 19:19:10 +0000
Message-ID: <YTXPR01MB0189B99A94C908E12AA74478DDB50@YTXPR01MB0189.CANPRD01.PROD.OUTLOOK.COM>
References: <YTXPR01MB0189BCC08195A19BB0745A85DDB40@YTXPR01MB0189.CANPRD01.PROD.OUTLOOK.COM>, <CAN-5tyECYtjkqWCy1a_Ri=ada_FxVi+8VOw9dU3_gKQSifJ5cg@mail.gmail.com>
In-Reply-To: <CAN-5tyECYtjkqWCy1a_Ri=ada_FxVi+8VOw9dU3_gKQSifJ5cg@mail.gmail.com>
Accept-Language: en-US
Content-Language: en-US
X-MS-Has-Attach:
X-MS-TNEF-Correlator:
authentication-results: spf=none (sender IP is ) smtp.mailfrom=rmacklem@uoguelph.ca;
x-ms-publictraffictype: Email
x-microsoft-exchange-diagnostics: 1; YTXPR01MB0192; 6:bGzDNyqJwb7tLco4Uke7uHxHXUhvEuHUutE77/UX+CetL0DyvyvhG1pUPv9efUUhIRL/bAvOSnxTDRVYX/jun1WFwhxfghbwz1OEYP563ixugd8KDW9REHqJPe6gqkMVP27t2cRK3EwhTaCaLxY0JhZwwd6OgEN/XbeJTJsVYmSXswH+S9sToGi1ZR9TmtQm8djIelfT2pcjYepamNyEp2hU/QRWN2mrNBjwD4NY8x1q6FFro8xmAxyrswy6PTcG7evkkDdSr+slZnulmDlT2WJwt2vCjrdA99bg6AOGs7OU8J4KziOiy8ARq8vzmPRisPn5T+s2yhNpNC2qiak17A==; 5:LjFxW/ooSCXxN7lshqQlvixMP6sWxrtgl6CTl4Oq9txP9iOV/65XOAk5OuUUbChRHhhsTCepn7csm6delub0rI6aTrLwDyWwH6IAwjLSPWj5cDwD41bYRq9Rby2t2Fr0EzXngmZTw3tlHMZsxJnAug==; 24:AwDBi+jtoQ9K/htmJ8Bimq97xoK/8UK124bCJ8I4qsMwPPjfnezO2AhVFF5/bdG1S2Zh8agexjbOUOoSK97sRKNYgeLhIO4OoFgGr6G+llk=; 7:uRDxP4QOvIM5gHbOXHss0opBQF4zIEuzblAVQHeOVx+5asYOaRaQ0oMyotrJGEF8Eva0YDCxQ2R7/o4cjrLWNSTi/hP94JrFiesC4vTXLBWc8SwcifCcrNcRJdbVR0Ou9TA28p5Q9Hi9JO7wwHHf38qOEaX/F48Umwqa7mfUILHfvlxLQ2Muh9hET/gWuwAcUgVHcyqxWut+dTS8aRJqjReo9whJuopONdERgLK1Zak=
x-ms-exchange-antispam-srfa-diagnostics: SSOS;
x-ms-office365-filtering-correlation-id: bf5df0be-3d7d-41f8-daec-08d4ddc92e8b
x-microsoft-antispam: UriScan:; BCL:0; PCL:0; RULEID:(300000500095)(300135000095)(300000501095)(300135300095)(22001)(300000502095)(300135100095)(2017030254152)(300000503095)(300135400095)(2017052603031)(201703131423075)(201703031133081)(201702281549075)(300000504095)(300135200095)(300000505095)(300135600095)(300000506095)(300135500095); SRVR:YTXPR01MB0192;
x-ms-traffictypediagnostic: YTXPR01MB0192:
x-exchange-antispam-report-test: UriScan:;
x-microsoft-antispam-prvs: <YTXPR01MB01922CFB428A5702DDE06BF9DDB50@YTXPR01MB0192.CANPRD01.PROD.OUTLOOK.COM>
x-exchange-antispam-report-cfa-test: BCL:0; PCL:0; RULEID:(100000700101)(100105000095)(100000701101)(100105300095)(100000702101)(100105100095)(6040450)(2401047)(5005006)(8121501046)(100000703101)(100105400095)(93006095)(93001095)(10201501046)(3002001)(6041248)(20161123562025)(201703131423075)(201702281529075)(201702281528075)(201703061421075)(201703061406153)(20161123558100)(20161123564025)(20161123555025)(20161123560025)(6072148)(100000704101)(100105200095)(100000705101)(100105500095); SRVR:YTXPR01MB0192; BCL:0; PCL:0; RULEID:(100000800101)(100110000095)(100000801101)(100110300095)(100000802101)(100110100095)(100000803101)(100110400095)(100000804101)(100110200095)(100000805101)(100110500095); SRVR:YTXPR01MB0192;
x-forefront-prvs: 0392679D18
x-forefront-antispam-report: SFV:NSPM; SFS:(10009020)(6009001)(39410400002)(39400400002)(39850400002)(39450400003)(39840400002)(199003)(189002)(24454002)(101416001)(14454004)(478600001)(25786009)(76176999)(54356999)(966005)(50986999)(102836003)(74482002)(2900100001)(97736004)(33656002)(189998001)(6436002)(305945005)(229853002)(3660700001)(74316002)(55016002)(6506006)(77096006)(81156014)(81166006)(3280700002)(86362001)(8936002)(2906002)(2950100002)(6916009)(8676002)(38730400002)(7696004)(6246003)(2171002)(110136004)(4326008)(9686003)(106356001)(39060400002)(54906002)(68736007)(105586002)(53936002)(6306002)(5660300001); DIR:OUT; SFP:1101; SCL:1; SRVR:YTXPR01MB0192; H:YTXPR01MB0189.CANPRD01.PROD.OUTLOOK.COM; FPR:; SPF:None; PTR:InfoNoRecords; A:1; MX:1; LANG:en;
received-spf: None (protection.outlook.com: uoguelph.ca does not designate permitted sender hosts)
spamdiagnosticoutput: 1:99
spamdiagnosticmetadata: NSPM
Content-Type: text/plain; charset="iso-8859-1"
Content-Transfer-Encoding: quoted-printable
MIME-Version: 1.0
X-OriginatorOrg: uoguelph.ca
X-MS-Exchange-CrossTenant-originalarrivaltime: 07 Aug 2017 19:19:10.3758 (UTC)
X-MS-Exchange-CrossTenant-fromentityheader: Hosted
X-MS-Exchange-CrossTenant-id: be62a12b-2cad-49a1-a5fa-85f4f3156a7d
X-MS-Exchange-Transport-CrossTenantHeadersStamped: YTXPR01MB0192
Archived-At: <https://mailarchive.ietf.org/arch/msg/nfsv4/UHshik3P2dqqFtHSGdssCZHZq3Y>
Subject: Re: [nfsv4] Path forward for flex-files
X-BeenThere: nfsv4@ietf.org
X-Mailman-Version: 2.1.22
Precedence: list
List-Id: NFSv4 Working Group <nfsv4.ietf.org>
List-Unsubscribe: <https://www.ietf.org/mailman/options/nfsv4>, <mailto:nfsv4-request@ietf.org?subject=unsubscribe>
List-Archive: <https://mailarchive.ietf.org/arch/browse/nfsv4/>
List-Post: <mailto:nfsv4@ietf.org>
List-Help: <mailto:nfsv4-request@ietf.org?subject=help>
List-Subscribe: <https://www.ietf.org/mailman/listinfo/nfsv4>, <mailto:nfsv4-request@ietf.org?subject=subscribe>
X-List-Received-Date: Mon, 07 Aug 2017 19:19:14 -0000

Olga Kornievskaia wrote:

> dot-x defs: https://www.rfc-editor.org/rfc/rfc7531.txt
>
>   typedef utf8str_mixed   fattr4_owner;
>   typedef utf8str_mixed   fattr4_owner_group;
Oh well. I've never looked at that RFC.
The draft could just be changed to define the ffds_user and ffds_group as opaque<>
instead of utf8str_mixed? (I don't think this would affect extant implementations,
which will just assume a utf string is in there and can't handle/support Kerberos.)
[stuff snipped]
> That's the problem you need something in the structure to pass back
> the ticket (TGT is not necessary. service ticket would do). Besides
> the ticket you need to send the other pieces.
Well, maybe a service ticket would work, but it would require a lot more "hacking"
on the RPCSEC_GSS code, I think?
- During initialization, the RPCSEC_GSS l;ayer normally calls
  gss_init_sec_context(). In the vanilla Heimdal libraries, this works if there
  are valid credentials in the credential cache and those come from the TGT.
  (I'll admit my Kerberos is rusty. If you can easily get gss_init_sec_context() to work
   with a service ticket, then I believe you. Also, I've never worked with the MIT libraries.)

rick