rpc.gssd

NAME

rpc.gssd - rpcsec_gss daemon

SYNOPSIS

rpc.gssd [-f] [-m] [-p pipefsdir] [-v]

DESCRIPTION

The rpcsec_gss protocol gives a means of using the gss-api generic security api to provide security for protocols using rpc (in particular, nfs). Before exchanging any rpc requests using rpcsec_gss, the rpc client must first establish a security context. The linux kernel's implementation of rpcsec_gss depends on the userspace daemon rpc.gssd to establish security contexts. The rpc.gssd daemon uses files in the rpc_pipefs filesystem to communicate with the kernel.

OPTIONS

-m: Ordinarily, rpc.gssd looks for a cached ticket for user $UID in /tmp/krb5cc_$UID. With the -m option, the user with uid 0 will be treated specially, and will be mapped instead to the credentials for the principal nfs/hostname found in the /etc/krb5.keytab file.
-p path: Tells rpc.gssd where to look for the rpc_pipefs filesystem. The default value is "/var/lib/nfs/rpc_pipefs".
-f: Runs rpc.gssd in the foreground and sends output to stderr (as opposed to syslogd)
-v: Increases the verbosity of the output (can be specified multiple times).

AUTHORS

Dug Song <dugsong@umich.edu>
Andy Adamson <andros@umich.edu>
Marius Aamodt Eriksen <marius@umich.edu>
J. Bruce Fields <bfields@umich.edu>