How does the NFS client find a users tickets in a filesystem?

[Wendy Lin]

On 14 September 2014 23:46, Frank Cusack <frank at linetwo.net> wrote:
> On Fri, Sep 12, 2014 at 8:53 AM, Wendy Lin <wendlin1974 at gmail.com> wrote:
>> How does the NFS client (say, Linux and AIX) find a users krb5 tickets
>> in the filesystem? Does /sbin/mount forward the ticket to rpc.gssd?
>>
> There's a so-called 'upcall' mechanism in the filesystem.  rpc.gssd gets
> requests from the nfs client through that and sends the answers through the
> same mechanism.  It's very patchwork IMHO.
>
> /sbin/mount and mounts_nfs per se have no knowledge of this authentication
> backdoor.

How does rpc.gssd find the tickets? They can be anywhere, as defined
by the KRB5CCNAME variable in the user's environment.

Wendy

>
>>
>> Wendy
>> ________________________________________________
>> Kerberos mailing list           Kerberos at mit.edu
>> https://mailman.mit.edu/mailman/listinfo/kerberos
>
>



-- 
Wendy