You cannot select more than 25 topics
Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
64 lines
2.8 KiB
Plaintext
64 lines
2.8 KiB
Plaintext
Significant changes for nfs-utils 1.1.0 - March/April 2007
|
|
|
|
- rpc.lockd is gone. One 3 old kernel releases need it.
|
|
- rpc.rquotad is gone. Use the one from the 'quota' package.
|
|
Everone else does.
|
|
- /sbin/{u,}mount.nfs{,4} are now installed so 'mount' will
|
|
use these to mount nfs filesystems instead of internal code.
|
|
+ mount.nfs will check for 'statd' to be running when mounting
|
|
a filesystem which requires it. If it is not running it will
|
|
run "/usr/sbin/start-statd" to try to start it.
|
|
If statd is not running and cannot be started, mount.nfs will
|
|
refuse to mount the filesystem and will suggest the 'nolock'
|
|
option.
|
|
- Substantial changes to statd
|
|
+ The 'notify' process that must happen at boot has been split
|
|
into a separate program "sm-notify". It ensures that it
|
|
only runs once even if you restart statd. This is correct
|
|
behaviour.
|
|
+ statd stores state in the files in /var/lib/nfs/sm/ so that
|
|
if you kill and restart it, it will restore that state and
|
|
continue working correctly.
|
|
+ statd makes more use of DNS lookup and should handle
|
|
multi-homed peers better. In particular, files in
|
|
/var/lib/nfs/sm/ are named with the Full Qualified Domain Name
|
|
if available.
|
|
- If you export a directory as 'crossmnt', all filesystems
|
|
mounted beneath are automatically exported with the same
|
|
options (unless explicitly exported with different options).
|
|
- subtree_check is no-longer the default. The default is now
|
|
no_subtree_check.
|
|
- By default the system 'rpcgen' is used while building
|
|
nfs-utils rather than the internal one.
|
|
- Exportfs will warn if you try to export a filesystem that does
|
|
not support NFS export.
|
|
- Comprehensive notes on startup dependencies have been added
|
|
to the README file.
|
|
- Mount and statd now listen on a non-privileged port by default.
|
|
For maximum safety an upgrade to portmap-6.0 is recommended.
|
|
http://neil.brown.name/portmap/
|
|
git://neil.brown.name/portmap
|
|
|
|
- This release should work with MIT Kerberos and Heimdal 0.8.1 and later.
|
|
|
|
- A new option, -n, was added to rpc.gssd which specifies that
|
|
accesses by root should not use 'machine credentials' when
|
|
accessing NFS file systems mounted with Kerberos. Using this
|
|
option allows the root user to access the NFS space using any
|
|
Kerberos principal, rather than always using the machine
|
|
credentials. However, its use also requires that root manually
|
|
authenticate before attempting a mount with Kerberos.
|
|
|
|
When rpc.gssd uses machine credentials, the selection algorithm has
|
|
been changed. Instead of simply using the first "nfs/*" key in the
|
|
keytab, the keytab is now searched for keys in the following
|
|
defined order:
|
|
|
|
root/<fqdn>@REALM
|
|
nfs/<fqdn>@REALM
|
|
host/<fqdn>@REALM
|
|
root/<any-name>@REALM
|
|
nfs/<any-name>@REALM
|
|
host/<any-name>@REALM
|
|
|