Blame SOURCES/nfs-utils-1.3.0-systemd-nfs-man.patch
|
 |
5fd2c0 |
diff -up nfs-utils-1.3.0/systemd/nfs.systemd.man.orig nfs-utils-1.3.0/systemd/nfs.systemd.man
|
|
|
5fd2c0 |
--- nfs-utils-1.3.0/systemd/nfs.systemd.man.orig 2018-07-21 06:10:06.938288975 -0400
|
|
|
5fd2c0 |
+++ nfs-utils-1.3.0/systemd/nfs.systemd.man 2018-07-21 06:10:18.888434798 -0400
|
|
|
5fd2c0 |
@@ -79,7 +79,7 @@ unit should be enabled.
|
|
|
5fd2c0 |
Several other units which might be considered to be optional, such as
|
|
|
5fd2c0 |
.I rpc-gssd.service
|
|
|
5fd2c0 |
are careful to only start if the required configuration file exists.
|
|
|
5fd2c0 |
-.I rpc-gsdd.service
|
|
|
5fd2c0 |
+.I rpc-gssd.service
|
|
|
5fd2c0 |
will not start if the
|
|
|
5fd2c0 |
.I krb5.keytab
|
|
|
5fd2c0 |
file does not exist (typically in
|
|
|
5fd2c0 |
@@ -120,10 +120,11 @@ be needed to reduce system load to an ab
|
|
|
5fd2c0 |
attack surface by not running daemons that are not absolutely
|
|
|
5fd2c0 |
required.
|
|
|
5fd2c0 |
.PP
|
|
|
5fd2c0 |
-Two particular services which this can apply to are
|
|
|
5fd2c0 |
-.I rpcbind
|
|
|
5fd2c0 |
+Three particular services which this can apply to are
|
|
|
5fd2c0 |
+.IR rpcbind ,
|
|
|
5fd2c0 |
+.IR idmapd ,
|
|
|
5fd2c0 |
and
|
|
|
5fd2c0 |
-.IR idmapd .
|
|
|
5fd2c0 |
+.IR rpc-gssd .
|
|
|
5fd2c0 |
.I rpcbind
|
|
|
5fd2c0 |
is not part of the
|
|
|
5fd2c0 |
.I nfs-utils
|
|
|
5fd2c0 |
@@ -155,6 +156,15 @@ is not needed and not wanted, it can be
|
|
|
5fd2c0 |
.RS
|
|
|
5fd2c0 |
.B systemctl mask idmapd
|
|
|
5fd2c0 |
.RE
|
|
|
5fd2c0 |
+.I rpc-gssd
|
|
|
5fd2c0 |
+is assumed to be needed if the
|
|
|
5fd2c0 |
+.I krb5.keytab
|
|
|
5fd2c0 |
+file is present. If a site needs this file present but does not want
|
|
|
5fd2c0 |
+.I rpc-gssd
|
|
|
5fd2c0 |
+running, it can be masked with
|
|
|
5fd2c0 |
+.RS
|
|
|
5fd2c0 |
+.B systemctl mask rpc-gssd
|
|
|
5fd2c0 |
+.RE
|
|
|
5fd2c0 |
.SH FILES
|
|
|
5fd2c0 |
/etc/nfs.conf
|
|
|
5fd2c0 |
.br
|