Messages in this thread |  | | Date | Sun, 12 Jan 2003 21:19:51 -0500 | From | Jeff Garzik <> | Subject | Re: [PATCH] Secure user authentication for NFS using RPCSEC_GSS [0/6] |
| |
On Mon, Jan 13, 2003 at 01:12:50AM +0100, Trond Myklebust wrote: > Our wish is to provide basic kernel RPC client support for the generic > RPCSEC_GSS protocol, and for communicating with a userland daemon that > does the actual the security context negotiation with the RPC server. > Communication between kernel and userland is done over a set of named > pipes (in much the same way as the CODA upcall/downcall is done) in a > private ramfs-like filesystem.
Well, AFS also wants Kerb [but a weird Kerb4 variant IIRC], but, OTOH why not do all this authentication and stuff in userspace?
Several other projects through the years have done similar things, where a userspace daemon handles auth and such, and then passes an fd into the kernel via ioctl [or write(2)ing fd value to a mini-ramfs VFS node]. - To unsubscribe from this list: send the line "unsubscribe linux-kernel" in the body of a message to majordomo@vger.kernel.org More majordomo info at http://vger.kernel.org/majordomo-info.html Please read the FAQ at http://www.tux.org/lkml/
|  |