NFSv4 details and documentations

Slawa Olhovchenkov slw at zxy.spb.ru
Wed Dec 2 11:23:19 UTC 2015


On Wed, Dec 02, 2015 at 12:02:43PM +0100, Joerg Sonnenberger wrote:

> On Wed, Dec 02, 2015 at 01:07:08PM +0300, Slawa Olhovchenkov wrote:
> > FreeBSD ssh'd use thread emulations by fork, as result Kerberos token
> > got at pam_krb5:auth can't be accessed at pam_krb5:session (for
> > writing in /tmp/krb5cc_UID. Recompile with
> > -DUNSUPPORTED_POSIX_THREADS_HACK resove this issuse (and I can login
> > with kerberos password to host with kerberoized NFSv4 and w/o
> > additional kinit or password sshd to another host.
> 
> Please try UsePrivilegeSeparation=no instead. The pthread hack should
> just die complete.

Don't work and can't be work.
pthread/thread fork emulation to be foreign to the priveledge seperation.


More information about the freebsd-hackers mailing list