The branch stable/13 has been updated by rmacklem:
URL:
https://cgit.FreeBSD.org/src/commit/?id=823ea1744e96430cb418c384aafd77ee6f916ce4
commit 823ea1744e96430cb418c384aafd77ee6f916ce4
Author: Rick Macklem <rmack...@freebsd.org>
AuthorDate: 2023-05-26 23:05:00 +0000
Commit: Rick Macklem <rmack...@freebsd.org>
CommitDate: 2023-05-26 23:05:00 +0000
RELNOTES: Add an entry for the NFS "syskrb5" mount option
---
RELNOTES | 11 +++++++++++
1 file changed, 11 insertions(+)
diff --git a/RELNOTES b/RELNOTES
index 4de47ccafddc..cf6ed985f608 100644
--- a/RELNOTES
+++ b/RELNOTES
@@ -10,6 +10,17 @@ newline. Entries should be separated by a newline.
Changes to this file should not be MFCed.
+0644746d5091:
+ Add a new "syskrb5" mount option for Kerberized NFSv4.1/4.2 mounts.
+ Without this patch, a Kerberized NFSv4.1/4.2 mount must provide
+ a Kerberos credential for the client at mount time.
+ This patch uses a feature of NFSv4.1/4.2 called SP4_NONE, which
+ allows the state maintenance operations to be performed by any
+ authentication mechanism, so that these operations may be done via
+ AUTH_SYS instead of RPCSEC_GSS (KerberosV). As such, no Kerberos
+ credential is required at mount time.
+ See mount_nfs(8).
+
b4805d577787 and many others:
Add support so that nfsd(8), nfsuserd(8), mountd(8), gssd(8)
and rpc.tlsservd(8) can be run in an appropriately configured
