Author: rmacklem
Date: Sat Aug 8 22:06:07 2015
New Revision: 286483
URL: https://svnweb.freebsd.org/changeset/base/286483
Log:
MFC: r285260
Since the case where secflavor < 0 indicates the security flavor is
to be negotiated, it could be a Kerberized mount. As such, filling
in the "principal" argument using the canonized host name makes sense.
If it is negotiated as AUTH_SYS, the "principal" argument is meaningless
but harmless.
Modified:
stable/10/sbin/mount_nfs/mount_nfs.c
Directory Properties:
stable/10/ (props changed)
Modified: stable/10/sbin/mount_nfs/mount_nfs.c
==============================================================================
--- stable/10/sbin/mount_nfs/mount_nfs.c Sat Aug 8 22:01:54 2015
(r286482)
+++ stable/10/sbin/mount_nfs/mount_nfs.c Sat Aug 8 22:06:07 2015
(r286483)
@@ -591,8 +591,8 @@ getnfsargs(char *spec, struct iovec **io
* For a Kerberized nfs mount where the "principal"
* argument has not been set, add it here.
*/
- if (got_principal == 0 && secflavor >= 0 &&
- secflavor != AUTH_SYS && ai_nfs->ai_canonname != NULL) {
+ if (got_principal == 0 && secflavor != AUTH_SYS &&
+ ai_nfs->ai_canonname != NULL) {
snprintf(pname, sizeof (pname), "nfs@%s",
ai_nfs->ai_canonname);
build_iovec(iov, iovlen, "principal", pname,
_______________________________________________
svn-src-stable-10@freebsd.org mailing list
https://lists.freebsd.org/mailman/listinfo/svn-src-stable-10
To unsubscribe, send any mail to "svn-src-stable-10-unsubscr...@freebsd.org"
