From patchwork Tue Nov 5 19:48:56 2013 Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit X-Patchwork-Submitter: Weston Andros Adamson X-Patchwork-Id: 3143511 Return-Path: X-Original-To: patchwork-linux-nfs@patchwork.kernel.org Delivered-To: patchwork-parsemail@patchwork1.web.kernel.org Received: from mail.kernel.org (mail.kernel.org [198.145.19.201]) by patchwork1.web.kernel.org (Postfix) with ESMTP id 752679F3C4 for ; Tue, 5 Nov 2013 19:49:19 +0000 (UTC) Received: from mail.kernel.org (localhost [127.0.0.1]) by mail.kernel.org (Postfix) with ESMTP id 2DB2F205C6 for ; Tue, 5 Nov 2013 19:49:18 +0000 (UTC) Received: from vger.kernel.org (vger.kernel.org [209.132.180.67]) by mail.kernel.org (Postfix) with ESMTP id 027F12027D for ; Tue, 5 Nov 2013 19:49:16 +0000 (UTC) Received: (majordomo@vger.kernel.org) by vger.kernel.org via listexpand id S1754403Ab3KETtD (ORCPT ); Tue, 5 Nov 2013 14:49:03 -0500 Received: from mx12.netapp.com ([216.240.18.77]:2093 "EHLO mx12.netapp.com" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1752906Ab3KETtC (ORCPT ); Tue, 5 Nov 2013 14:49:02 -0500 X-IronPort-AV: E=Sophos;i="4.93,640,1378882800"; d="scan'208";a="110482318" Received: from vmwexceht01-prd.hq.netapp.com ([10.106.76.239]) by mx12-out.netapp.com with ESMTP; 05 Nov 2013 11:49:01 -0800 Received: from smtp1.corp.netapp.com (10.57.156.124) by VMWEXCEHT01-PRD.hq.netapp.com (10.106.76.239) with Microsoft SMTP Server id 14.3.123.3; Tue, 5 Nov 2013 11:49:01 -0800 Received: from vpn2ntap-112590.vpn.netapp.com (vpn2ntap-112590.vpn.netapp.com [10.55.69.239]) by smtp1.corp.netapp.com (8.13.1/8.13.1/NTAP-1.6) with ESMTP id rA5Jn02D015106; Tue, 5 Nov 2013 11:49:00 -0800 (PST) From: Weston Andros Adamson To: CC: , Weston Andros Adamson Subject: [PATCH] nfs.man: add description of multiple sec= options Date: Tue, 5 Nov 2013 14:48:56 -0500 Message-ID: <1383680936-2170-1-git-send-email-dros@netapp.com> X-Mailer: git-send-email 1.8.3.1 (Apple Git-46) MIME-Version: 1.0 Sender: linux-nfs-owner@vger.kernel.org Precedence: bulk List-ID: X-Mailing-List: linux-nfs@vger.kernel.org X-Spam-Status: No, score=-6.9 required=5.0 tests=BAYES_00, RCVD_IN_DNSWL_HI, RP_MATCHES_RCVD, UNPARSEABLE_RELAY autolearn=unavailable version=3.3.1 X-Spam-Checker-Version: SpamAssassin 3.3.1 (2010-03-16) on mail.kernel.org X-Virus-Scanned: ClamAV using ClamSMTP The client now supports multiple sec= options as a colon delimited list. Signed-off-by: Weston Andros Adamson --- Updated with comments from Chuck and Trond - I changed the wording and added an example. The example section could use some work... but I'll leave that for another day. utils/mount/nfs.man | 17 +++++++++++++---- 1 file changed, 13 insertions(+), 4 deletions(-) diff --git a/utils/mount/nfs.man b/utils/mount/nfs.man index 2a42b93..67031b5 100644 --- a/utils/mount/nfs.man +++ b/utils/mount/nfs.man @@ -380,9 +380,10 @@ If a value of zero is specified, the .BR mount (8) command exits immediately after the first failure. .TP 1.5i -.BI sec= flavor -The security flavor to use for accessing files on this mount point. -If the server does not support this flavor, the mount operation fails. +.BI sec= flavors +A colon-separated list of one or more security flavors to use for accessing +files on the mounted export. If the server does not support any of these +flavors, the mount operation fails. If .B sec= is not specified, the client attempts to find @@ -908,7 +909,7 @@ Here is an example from an /etc/fstab file for an NFS version 2 mount over UDP. server:/export /mnt nfs nfsvers=2,proto=udp 0 0 .fi .P -Try this example to mount using NFS version 4 over TCP +This example shows how to mount using NFS version 4 over TCP with Kerberos 5 mutual authentication. .P .nf @@ -916,6 +917,14 @@ with Kerberos 5 mutual authentication. server:/export /mnt nfs4 sec=krb5 0 0 .fi .P +This example shows how to mount using NFS version 4 over TCP +with Kerberos 5 privacy or data integrity mode. +.P +.nf +.ta 8n +16n +6n +6n +30n + server:/export /mnt nfs4 sec=krb5p:krb5i 0 0 +.fi +.P This example can be used to mount /usr over NFS. .P .nf