Examine incoming x.509 client certs' SAN field for user squashing instructions

linux-nfs / nfsd

Linux kernel source tree

Other

0 stars 0 forks source link

Examine incoming x.509 client certs' SAN field for user squashing instructions #55

Open chucklever opened 5 months ago

chucklever commented 5 months ago

FreeBSD NFS servers implement a user ID squashing scheme where an incoming client cert can contain a single user ID that the server is to use for all RPC requests in this TLS session. This is equivalent to user authentication when there is only ever one user on the client.