commit 18737ed451868ace7907c59e4fe69f9c0db43d96 Author: Steve Dickson Date: Tue Nov 5 15:41:27 2013 -0500 Release 1.2.9 Signed-off-by: Steve Dickson commit f43f52013a578ae0fde89f4d737d1e30de51d413 Author: Weston Andros Adamson Date: Tue Nov 5 15:40:21 2013 -0500 nfs.man: add description of multiple sec= options The client now supports multiple sec= options as a colon delimited list. Signed-off-by: Weston Andros Adamson Signed-off-by: Steve Dickson commit 07280569e08f5810cd586c594ea257840609099b Author: Robert Schiele Date: Tue Nov 5 14:21:47 2013 -0500 statd: fix race condition for parallel startup of statd When start_statd figures out that statd is not yet running it starts it, waits for the invoked process to complete, and finally verifies that statd is working. This approach works for serially mounting NFS file systems but has a race condition for parallel mounting. In the parallel case it can happen that two mount commands A and B both decide that statd needs to be started. Both of them try to start statd. Obviously only one of them can successfully do so, let's assume this is command A in our case. The statd invoked by B terminates because the resource is already claimed by the statd invoked by A. The termination of B's statd though is before the statd of A has completely set up all things. This causes the check for a working statd of command B to fail and terminate the mount request with an error. To prevent this we define a timeout value. In case the initial check after invoking statd fails we try again in a loop 10 times a second until the timeout is reached. In our tests when the race occurred we typically were successful already on the first retry within the loop. Signed-off-by: Steve Dickson commit ff948a50ef1013d7caa5d66e5534f69a94ec1c88 Author: Steve Dickson Date: Tue Nov 5 14:11:44 2013 -0500 mountd: Add the ability to disable UDP listeners. Add the ability to turn off UDP listeners with the new "-u | --no-udp" flag. Signed-off-by: Steve Dickson commit a80482157632584ee03df58ed1eef3cefd95bbcb Author: Steve Dickson Date: Tue Nov 5 14:10:05 2013 -0500 mountd: Use protocol bit fields to turn protocols off. Convert the current code to used the NFSCTL_XXX macros to turn off the TCP listener. Signed-off-by: Steve Dickson commit d4a408776d611cd62235232d65d488d02fca78e4 Author: NeilBrown Date: Tue Nov 5 14:03:53 2013 -0500 exportfs: exit with error code if there was any error (take 2). exportfs currently exits with a non-zero error for some errors, but not for others. It does this by having various support routines set the global variable "export_errno". Change this to have 'xlog' set export_errno if an ERROR is reported. That way all errors will be caught. Note that the exit error code is changed from 22 (EINVAL) to the more traditional '1'. Signed-off-by: NeilBrown Signed-off-by: Steve Dickson commit da88f28656da305ed319867211753baac32c4242 Author: Steve Dickson Date: Mon Oct 28 08:45:19 2013 -0400 exportfs: report failure if asked to unexport something not exported. Currently if exportfs is asked to unexport something that is not exported it silently succeeds. This is not ideal, particularly for scripting situations. So report an error when the unexport was successful and the -v flag used. Signed-off-by: Steve Dickson commit 74de1431adebb7780a2c4b9c122050e2fb7608b8 Author: Weston Andros Adamson Date: Mon Oct 28 08:26:37 2013 -0400 gssd: validate cred in gssd_acquire_user_cred Call gss_inquire_cred after gssd_acquire_krb5_cred check for expired credentials. This fixes a recent regression (since 302de786930a2c533068f9d8909a) that causes the user's ticket cache to grow unbounded with expired service tickets when the user's credentials expire. To reproduce this issue: - mount kerberos nfs export - kinit for a short lifetime (ie "kinit -l 1m") - run a job that opens a file and writes for more than the lifetime - run klist a few times after expiry and see the list grow, ie: Ticket cache: DIR::/run/user/1749600001/krb5cc/tktYmpGlX Default principal: dros@APIKIA.FAKE Valid starting Expires Service principal 10/21/2013 15:39:38 10/21/2013 15:40:35 krbtgt/APIKIA.FAKE@APIKIA.FAKE 10/21/2013 15:39:40 10/21/2013 15:40:35 nfs/zero.apikia.fake@APIKIA.FAKE Signed-off-by: Weston Andros Adamson Reviewed-by: Simo Sorce Signed-off-by: Steve Dickson commit 8a5da2b392bc25feb58a9de11cac411f5f8473bb Author: NeilBrown Date: Thu Oct 24 15:58:45 2013 -0400 Stop Treat IP addresses a FQDN rather than SUBNETs. I think there was a reason for this many years ago, but I can not find any evidence that it ever really did anything useful and it certainly doesn't seem to now. And the documentation suggests that IP address take precedence over SUBNETs, and that can only happen if they are treated as MCL_FQDN. So remove this apparently pointless code. Reported-and-tested-by: Wangminlan Signed-off-by: NeilBrown Signed-off-by: Steve Dickson commit a90df3f9270464c4a234e63626c5870c76997a90 Author: NeilBrown Date: Thu Oct 24 15:56:18 2013 -0400 mountd: fix bug affecting exports of dirs with 64bit inode number. parse_fsid() is currently truncating all inode numbers to 32bits, and assumes that 'int' is 32 bits (which it probably is, but we shouldn't assume). So make the 'inode' field in 'struct parsed_fsid' a 64 bit field. and only memcpy into variables or fields that have been declared to a specific bit size. Signed-off-by: NeilBrown Signed-off-by: Steve Dickson commit 232eb7ad09f9fd2ae4918699f850e4f8cadc2632 Author: NeilBrown Date: Tue Oct 22 04:36:54 2013 -0400 exportfs: exit with error code if there was any error. exportfs currently exits with a non-zero error for some errors, but not for others. It does this by having various support routines set the global variable "export_errno". Change this to have 'xlog' set export_errno if an ERROR is reported. That way all errors will be caught. Note that the exit error code is changed from 22 (EINVAL) to the more traditional '1'. Signed-off-by: NeilBrown Signed-off-by: Steve Dickson commit efe3c8d6cb4fc35909a64c0535087676a189fa5f Author: Steve Dickson Date: Tue Oct 22 04:32:08 2013 -0400 Revert "exportfs: Return non-zero exit value on error" This reverts commit 956aeff2e24304e938846f81f4b9db34cbf18a32. commit 956aeff2e24304e938846f81f4b9db34cbf18a32 Author: Tony Asleson Date: Tue Oct 22 04:28:48 2013 -0400 exportfs: Return non-zero exit value on error To improve error handling when scripting exportfs it's useful to have non-zero exit codes when the requested operation did not succeed. This patch also returns a non-zero exit code if you request to unexport a non-existant share. Signed-off-by: Tony Asleson Signed-off-by: Steve Dickson commit 4d9b08c1599046cf9b401769d0da4a9e65fee7c3 Author: Jeff Layton Date: Mon Oct 21 13:33:21 2013 -0400 mount.nfs: print an error message when remount attempt fails Currently, mount.nfs returns an error code, but doesn't print anything when this occurs. Reported-by: Eric Doutreleau Signed-off-by: Jeff Layton Signed-off-by: Steve Dickson commit 6b53fc9ce38ba6fff2fd5c2f6ed143747067a39d Author: Jeff Layton Date: Mon Oct 21 13:28:06 2013 -0400 gssd: do a more thorough change of identity after forking The part of process_krb5_upcall that handles non-machine user creds first tries to query GSSAPI for credentials. If that fails, it then falls back to trawling through likely credcache locations to find them and then points $KRB5CCNAME at it before proceeding. There are a number of bugs in this code that this patch attempts to address. The code that queries GSSAPI for credentials does it as root which almost universally fails to do anything useful unless we happen to be looking for non-machine root creds. Because of this, gssd almost always falls back to having to search for credcaches "manually". The code that handles credential switching is in create_auth_rpc_client, so it's too late to be of any use here. Worse yet, for historical reasons the MIT krb5 authors used %{uid} in the default credcache locations which translates to the real uid. Thus switching the fsuid or even euid is insufficient. You must switch the real uid in order to be able to find the proper credcache in most cases. This patch moves the credential switching to occur much earlier in the process and has it do a much more thorough job of it. It first drops all supplimentary groups, then determines a gid to use and switches the gids and uids to the correct ones. If it can't determine the correct gid to use, it then tries to look up the one for "nobody" and uses that. Once the credentials are switched, the forked child now no longer tries to change them back. It does the downcall with the new credentials and just exits when it's done. Signed-off-by: Jeff Layton Signed-off-by: Steve Dickson commit f9cac65972da588d5218236de60a7be11247a8aa Author: Jeff Layton Date: Mon Oct 21 13:27:22 2013 -0400 gssd: have process_krb5_upcall fork before handling upcall Most krb5 installations use credcache locations that contain %{uid}, which expands to the real UID of the current process. In order for GSSAPI to find those properly, we need to be able to switch the real UID of the process to the designated one. That however, opens the door to allowing gssd to be killed or reniced during the window where we've switched credentials. To combat this, change gssd to fork before trying to handle each upcall. The child will do the work to establish the context and the parent task will just wait for it to exit. It's still possible for the child to be killed or reniced, but that would only affect a single upcall instead of the entire daemon. Also, If the process is killed prematurely, then log an error to tip off the admin that there was a problem. Signed-off-by: Jeff Layton Signed-off-by: Steve Dickson commit 13a454a56040af9146c232760993e35f2b0e1ec4 Author: Tony Asleson Date: Mon Oct 21 13:13:18 2013 -0400 exportfs: Add -s option. Adds '-s' option which outputs the current exports in a format suitable for /etc/exports. Signed-off-by: Tony Asleson Signed-off-by: Steve Dickson commit 610e8a05ecadf2d46cf2ed4c64ee5ce332117f6a Author: Weston Andros Adamson Date: Mon Oct 21 10:06:41 2013 -0400 mountstats: fix python2.x support Commit b703eabe converted mountstats to using python3's print() function, but this doesn't work in python2.x without importing the print function from __future__. Signed-off-by: Weston Andros Adamson Signed-off-by: Steve Dickson commit 6085de30b363e916ea6968f54c294aeecac07efa Author: Steve Dickson Date: Mon Oct 21 10:03:04 2013 -0400 nfsmount.conf: remove duplicate 'timeo' from the parsing string When the 'timeo' option is specified in multiple sections of the nfsmount.conf file, each instance is added to the parsing string. This patch make the first instance override any others. Signed-off-by: Steve Dickson commit a4cffdb22fd11f37bfd1ccffd91aacd4c77cba5e Author: Steve Dickson Date: Mon Oct 21 10:02:12 2013 -0400 nfsmount.conf: Remove duplicate 'bg' and 'fg' from parsing string. When the 'Background' and/or 'Foreground' options are set in multiple sections of the nfsmount.conf file, each instance gets added to the parsing string. This patch makes the first instance of either option override the any others. Signed-off-by: Steve Dickson commit 23118dcce61979da9d3c007cdde1405273de2d8f Author: Jeff Layton Date: Mon Oct 21 09:55:56 2013 -0400 nfs-utils: remove gss_clnt_send_err and gss_destroy_creds As Bruce recently pointed out, gss_clnt_send_err basically does an unsolicited downcall into the kernel to try and destroy a valid GSS context. That has been broken however since this kernel commit: commit 3b68aaeaf54065e5c44583a1d33ffb7793953ba4 Author: Trond Myklebust Date: Thu Jun 7 10:14:15 2007 -0400 SUNRPC: Always match an upcall message in gss_pipe_downcall() Downcalls that don't match an in-progress upcall just get back an -ENOENT error and don't actually do anything. Remove these tools since they've been useless for the last 6 years. Reported-by: "J. Bruce Fields" Signed-off-by: Jeff Layton Signed-off-by: Steve Dickson commit 2ab664bdf87b80b030b518cd1f0246c9c03557ed Author: J. Bruce Fields Date: Mon Sep 30 10:45:11 2013 -0400 exportfs: clean up exports.d discussion From: "J. Bruce Fields" The syntax here is a little convoluted. Signed-off-by: J. Bruce Fields Signed-off-by: Steve Dickson commit 7b5bc7505c16f6e3ae08228426005644417fa05b Author: J. Bruce Fields Date: Tue Sep 24 15:23:17 2013 -0400 exportfs: test_export shouldn't use invalid uid/gid From: "J. Bruce Fields" Some newer kernels are rejecting -1 uid/gid. Actually, worse--they're silently ignoring any attempt to cache such exports, thus preventing test_export from getting back the errors it needs. And -1 wasn't a good choice anyway. Signed-off-by: J. Bruce Fields Signed-off-by: Steve Dickson commit 7004991526be90ec2647d28c503936dc91bc9100 Author: Trond Myklebust Date: Tue Sep 24 15:12:01 2013 -0400 exportfs: Fix the default authentication flavour setting Commit 11ba3b1e01b67b7d19f26fba94fabdb60878e809 (Add a default flavor to an export's e_secinfo list) breaks the ordering of security flavours in the secinfo list, by reordering 'sec=sys' to always be the first secinfo flavour if one fails to set a default 'sec' setting. An export of the form: /export -sync,no_subtree_check,mp \ 192.168.1.0/24(sec=krb5p:krb5i:krb5,rw,sec=sys,ro) ends up getting translated by exportfs into the following entry in /var/lib/nfs/etab: /export 192.168.1.0/24(ro,sync,wdelay,hide,nocrossmnt,\ secure,root_squash,no_all_squash,\ no_subtree_check,secure_locks,acl,\ mountpoint,anonuid=65534,anongid=65534,\ sec=sys,ro,root_squash,no_all_squash,\ sec=krb5p:krb5i:krb5,rw,root_squash,no_all_squash) Note how the 'sec=sys' is now listed first... The fix is to defer adding the default flavour until the call to secinfo_show, when we can see if it is even needed at all. With the patch, the above export is now correctly entered in /var/lib/nfs/etab as: /export 192.168.1.0/24(ro,sync,wdelay,hide,nocrossmnt,\ secure,root_squash,no_all_squash,\ no_subtree_check,secure_locks,acl,\ mountpoint,anonuid=65534,anongid=65534,\ sec=krb5p:krb5i:krb5,rw,root_squash,no_all_squash,\ sec=sys,ro,root_squash,no_all_squash) Cc: Chuck Lever Signed-off-by: Trond Myklebust Signed-off-by: Steve Dickson commit bdc50fc12a621545feaf9925999723d45171c34d Author: J. Bruce Fields Date: Tue Sep 24 15:02:49 2013 -0400 gssd: don't use tgtname to find our keytab From: "J. Bruce Fields" The tgtname is of the form service@hostname. It's not a hostname, and attempting to look it up here just causes failure of any upcall with a "target=" field (currently, any upcall on behalf of an nfsv4.0 callback). I think the theory was that knowning that target= name might help pick the right keytab, but I don't really know if that's helpful. For now, just stop trying to do this. Signed-off-by: J. Bruce Fields Signed-off-by: Steve Dickson commit a6ab6f63de618180127daadc070d696f6268000f Author: J. Bruce Fields Date: Tue Sep 24 15:01:57 2013 -0400 gssd: don't use tgtname to find our keytab From: "J. Bruce Fields" The tgtname is of the form service@hostname. It's not a hostname, and attempting to look it up here just causes failure of any upcall with a "target=" field (currently, any upcall on behalf of an nfsv4.0 callback). I think the theory was that knowning that target= name might help pick the right keytab, but I don't really know if that's helpful. For now, just stop trying to do this. Signed-off-by: J. Bruce Fields Signed-off-by: Steve Dickson commit 841e83c1caf028bf61ae37030aaa3453f2a2b136 Author: J. Bruce Fields Date: Tue Sep 24 14:33:23 2013 -0400 gssd: fix strncmp bug causing client removals From: "J. Bruce Fields" Both dirname and pdir are null-terminated strings, so there's no reason I can see for the strncmp. And this gives the wrong result when comparing the "nfsd" and "nfsd4_cb" directories! The results were callback clients being removed immediately after creation, when lack of a client with the corresponding name under "nfsd" lead gssd to believe it had disappeared from "nfsd4_cb". Signed-off-by: J. Bruce Fields Signed-off-by: Steve Dickson commit 9f9289efda1a7eff26cd046997efc56c2de40534 Author: Bohuslav Kabrda Date: Wed Sep 18 12:02:07 2013 -0400 nfs-iostat: Make Python 3 compatible This will make nfs-iostat run on Python 2.6, 2.7 and >= 3.0 Signed-off-by: Bohuslav Kabrda Signed-off-by: Steve Dickson commit b703eabe4c4bc5c2d5fd9a07b6b995d67ea7e77a Author: Bohuslav Kabrda Date: Wed Sep 18 12:00:25 2013 -0400 mountstats: Make mountstats Python 3 compatible This will make mountstat run on Python 2.6, 2.7 and >= 3.0 Signed-off-by: Bohuslav Kabrda Signed-off-by: Steve Dickson commit cbf22367d0b1c1e200a51ec1e33f5438d1edd14f Author: Harshula Jayasuriya Date: Wed Sep 18 11:54:26 2013 -0400 nfsiostat: periodically flush stdout In a shell script, when nfsiostat is run in the background with stdout redirected to a file, flush stdout periodically to ensure that we do not lose the buffered output if the nfsiostat process is killed. Signed-off-by: Harshula Jayasuriya Signed-off-by: Steve Dickson commit 9b5c3c6a6571a265a90cfce30345891fac24a67c Author: Trond Myklebust Date: Wed Sep 18 11:50:58 2013 -0400 exportfs: insecure/secure should be a secinfo_flag The 'insecure' flag is listed in /proc/fs/nfsd/export_features in newer kernels as being a secinfo_flag, however it is not displayed by secinfo_show. This patch fixes that, and sets up a framework which should make it easy to add new flags to /proc/fs/nfsd/export_features and have them be displayed properly. Signed-off-by: Trond Myklebust Signed-off-by: Steve Dickson commit 56e3172f5ccbc232204b11cdbf31d9a627c9f6ad Author: Jim Rees Date: Thu Sep 5 11:59:19 2013 -0400 exports.man: quote command to preserve space Signed-off-by: Jim Rees Signed-off-by: Steve Dickson commit c17c98d08967bc1aba9f93a4b88580c827bf82c7 Author: NeilBrown Date: Thu Sep 5 11:56:04 2013 -0400 gssd: suppress error message if rpc_pipefs dir disappears. It is possible for a race to cause a name to appear when an rpc_pipefs dir is scanned but to no longer be present when we try to open it. So if the error is ENOENT, don't complain. This is similar to commit 5ac9bcfd820f09af4d3f87f1f7346d896f70bc9a Author: David Jeffery Date: Wed Jan 16 15:21:55 2013 -0500 rpc.idmapd: Ignore open failures in dirscancb() which addressed a similar issue in idmapd. Signed-off-by: NeilBrown Signed-off-by: Steve Dickson commit fbbdcf6d77318bf95389be71a46ffc311580f975 Author: Scott Mayhew Date: Mon Aug 19 13:03:31 2013 -0400 mount.nfs: improve handling of bg, fg, and sloppy in nfsmount.conf This patch makes 2 small improvements to the parsing of the bg, fg, and sloppy mount options in nfsmount.conf. 1. "bg" and "fg" negate should each other. "Background=True" should mean "bg" and "Background=False" should mean "fg". The same applies to "Foreground". 2. Once we see "Sloppy=False" while parsing the configuration file we should ignore subsequent occurrences of the sloppy option. This will preserve the "right-most setting wins" behavior for the sloppy mount option. Acked-by: Chuck Lever Signed-off-by: Scott Mayhew Signed-off-by: Steve Dickson commit 95f7dee0fe4ee13c17f31441f5cfe7600381869f Author: Scott Mayhew Date: Mon Aug 19 13:00:00 2013 -0400 mount.nfs: dont pass options from configuration sections that are not relevant The nfsmount.conf file has the following format: [ section "arg" ] tag = value conf_get_tag_list() currently doesn't check the arg field so we wind up getting all the options that fall under a particular section value, instead of just the ones that match the specific "arg" field. As a result, we wind up passing options to the mount syscall from sections that aren't even relevant to the mount operation that is being performed. For example, if we have three different server sections, and each section has an Nfsvers tag, then the string we pass to the mount syscall will have two extra occurrences of the nfsvers option. Each option should appear at most 4 times -- once for the system section, once for the server-specific section, once for the mount-specific section, and once for the command line mount options. Acked-by: Chuck Lever Signed-off-by: Scott Mayhew Signed-off-by: Steve Dickson commit 7c8eba31b6c1888fad2481ed5e365f766ba6120d Author: J. Bruce Fields Date: Mon Aug 19 12:55:01 2013 -0400 rpc.idmapd: silence pointless EOF warning RH bz 831455 has a report that repeatedly mounting and unmounting over lo can hit this warning in the EOF case. I suspect that's just normal--I'm not sure of the details, but probably idmapd gets woken up to check for an upcall and then the upcall gets yanked away before idmapd gets a chance to read it. So just skip the warning in that case. I also can't see a reason to reopen. Signed-off-by: J. Bruce Fields Signed-off-by: Steve Dickson commit 12a590f8d556c00a9502eeebaa763d906222d521 Author: Steve Dickson Date: Mon Aug 19 12:49:44 2013 -0400 rpc.nfsd: Allow v4.2 server support with the -V option Signed-off-by: Steve Dickson commit 6b4e4965a6b82e8d49cea1c0316b951ba4e9e83e Author: Steve Dickson Date: Mon Aug 19 12:48:06 2013 -0400 rpc.nfsd: No longer advertise NFS v2 support. Changed the default protocol versions that rpc.nfsd register with rpcbind to just 3 and 4. Version 2 can still be enabled with the '-V' flag, but it will not be on by default. Signed-off-by: Steve Dickson commit da05b199a60e8a8fa91d4d3734cbbe84b23cff69 Author: Doug Nazar Date: Tue Jul 2 08:45:31 2013 -0400 gssd: fixed typo in machine cred name. Commit 1c787f14 [gssd: scan for DIR: ccaches, too] changed the default prefix for the credential cache files. Update the check to ignore the machine credential file when running with -n (root ignores machine credentials). Signed-off-by: Steve Dickson commit 05e6d39a988e76d5803f79018a9e40d435f6d2f7 Author: NeilBrown Date: Tue Jul 2 08:27:41 2013 -0400 gssd: don't give up on machine credential if hostname not available. krb5_util tries various different credential names in order to find the machine credential, not all of them use the full host name of the current host. So if getting the full host name fails, don't give up completely, still try the other options. Signed-off-by: NeilBrown Signed-off-by: Steve Dickson commit 94642a397d27ea0cfc6d798bc505482023eb5ec1 Author: Weston Andros Adamson Date: Mon Jul 1 12:00:51 2013 -0400 nfsiostat: restore output format Recent changes to support python 3 changed the output of nfsiostat from: read: ops/s kB/s kB/op retrans avg RTT (ms) avg exe (ms) 48.094 2889.133 60.072 0 (0.0%) 177.160 184.833 ... to: read: ops/s kB/s kB/op retrans avg RTT (ms) avg exe (ms) 0.000 0.000 0.000 0 (0.0%) 0.000 0.000 ... Signed-off-by: Weston Andros Adamson Signed-off-by: Steve Dickson commit a402f768db1dc6497cf7f592b33e142936897de2 Author: Maximilian Wilhelm Date: Mon Jul 1 11:58:13 2013 -0400 Fix handling of preferred realm command line option. The current implementation ignores any preferred realm specified on the command line. Fix this behaviour and make sure the preferred realm is used as first realm when trying to acquire a keytab entry Signed-off-by: Maximilian Wilhelm Signed-off-by: Frederik Moellers Signed-off-by: Steve Dickson commit c8887780aec02209db27f397b0e4b1f6fc065071 Author: NeilBrown Date: Mon Jul 1 11:10:31 2013 -0400 gssd: remove redundant array size. When initialising an array there is no need to specify the size as the size is taken from the initialiser. Having the size there means that any change to the initialiser needs to change the size to and so is error-prone. So just remove the size. Signed-off-by: NeilBrown Signed-off-by: Steve Dickson commit a2bdacaa4184d5d921fb1da5f7789078412b1afe Author: Luk Claes Date: Tue May 28 13:34:31 2013 -0400 nfsidmap: add default id_resolver.conf Signed-off-by: Steve Dickson commit b0870ddfc32d6bdf17b84e28b1f6033411a8a178 Author: Luk Claes Date: Tue May 28 13:01:50 2013 -0400 nfsdcltrack.man: drop autogenerated roff The man page was generated, but this file is intended as the source to make modifications. So remove all generated comments and only leave what's needed and easily maintained manually without changing the appearance of the man page. Acked-by: Jeff Layton Signed-off-by: Luk Claes Signed-off-by: Steve Dickson commit c93e8d8eeafec3e3228e24dfebef113e0a79a788 Author: Signed-off-by: NeilBrown Date: Tue May 28 12:59:22 2013 -0400 gssd: Fix recent fix to Avoid DNS reverse resolution in gssd. The final version for this fix that was committed inverted the test so makes no change in the important cases. The documentation didn't really help a naive user know when the new -D flag should be used. And the code (once fixed) avoided DNS resolution on non-qualified names too, which probably isn't a good idea. This patch fixes all three issues. Signed-off-by: NeilBrown Signed-off-by: Steve Dickson commit 72bf5b15946db37a6663c93bb9c9dadcdb996f18 Author: Steve Dickson Date: Tue May 7 11:51:03 2013 -0400 gssd: Remove unnecessary including of ctype.h Signed-off-by: Steve Dickson commit 23d3980b6cfea4e9056d9b7b81e48b4fefc645e0 Author: NeilBrown Date: Tue May 7 11:46:18 2013 -0400 mountd: Fix is_subdirectory again The problem was that is_subdirectory() would also succeed if the two directories were the same. This is needed for path_matches() which needs to see if the child is same-or-descendant. So this patch rearranges path_matches() to do the "are they the same" test itself and only bother with is_subdirectory() if it they are not the same. So now is_subdirectory() can be strict, and so can be usable for subexport(), which needs a strong 'in subdirectory - not the same' test. Acked-by: J. Bruce Fields Signed-off-by: NeilBrown Signed-off-by: Steve Dickson commit 342446a4a624d4ee8254af859bb7f1de6d268679 Author: Weston Andros Adamson Date: Tue May 7 11:25:29 2013 -0400 statd: exit if a statd is already running Moves nfs_probe_statd from mount to nfs support lib to share with statd. Acked-by: Chuck Lever Signed-off-by: Weston Andros Adamson Signed-off-by: Steve Dickson commit 8fc8022c75956efb14cd2b1fa93210d534310cf9 Author: Chris Vogan Date: Tue May 7 11:08:52 2013 -0400 nfs.man: Move nfsvers to "Options supported by all versions" section After inclusion of NFSv4.1 it seems that now you can specify an NFSv4 mount with either "-tnfs4" or "-overs=4". This patch moves "nfsvers/vers" from "Options for NFS versions 2 and 3 only" to "Options supported by all versions". Signed-off-by: Steve Dickson