[nfsv4] more on gss authentication for callback

rick@snowhite.cis.uoguelph.ca Thu, 30 October 2003 21:57 UTC

From: rick@snowhite.cis.uoguelph.ca
Message-Id: <200310302158.QAA03320@snowhite.cis.uoguelph.ca>
To: nfsv4@ietf.org
Subject: [nfsv4] more on gss authentication for callback
Sender: nfsv4-admin@ietf.org
Errors-To: nfsv4-admin@ietf.org
Precedence: bulk
Date: Thu, 30 Oct 2003 16:58:11 -0500

First, thanks a lot for the good info. I now have some idea of what to do.
One case I am curious about:
- The client authenticates to the server for SetClientID with
	target: nfs@<serverhost.domain>
	initiator: root (or root@REALM in Kerberos jargon)
then, can the server authenticate the callback with
	target: root
	initiator: nfs@<serverhost.domain>	??
Can the client do a gss_accept_sec_context() with "root@REALM" credentials
without any keytab and get the principal nfs@<serverhost.domain>?

If the above would work, that would avoid the client having to have a
keytab file.

Anyone know if this will work, or see problems with it? rick

_______________________________________________
nfsv4 mailing list
nfsv4@ietf.org
https://www1.ietf.org/mailman/listinfo/nfsv4

[nfsv4] more on gss authentication for callback rick
Re: [nfsv4] more on gss authentication for callba… Nicolas Williams
RE: [nfsv4] more on gss authentication for callba… Mike Eisler
Re: [nfsv4] more on gss authentication for callba… Nicolas Williams
Re: [nfsv4] more on gss authentication for callba… Trond Myklebust