Support for RPCSEC GSS v3

linux-nfs / nfsd

Linux kernel source tree

Other

0 stars 0 forks source link

Support for RPCSEC GSS v3 #27

Open chucklever opened 7 months ago

chucklever commented 7 months ago

This was bugzilla.linux-nfs.org 359

[Chuck Lever 2020-12-11 19:43:10 UTC] RPCSEC GSS v3 (RFC 7861) is similar to v2 except it adds third-party authentication and subject labels. It would be needed for secure inter-server COPY.

chucklever commented 7 months ago

Server-to-server copy seems to be an in-demand feature, and we can't enable it in NFSD until we have a guaranteed secure connection between the source and destination server, along with the ability for the source server to act on behalf of the user requesting the copy. This capability is provided only in RPCSEC GSS v3.