X-Recipient:	archive-cygwin AT delorie DOT com
DomainKey-Signature:	a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=LRaNFtGv4bXjo4bdn/1lOKW70OoyuI6bCOA3zy19pfcO0kyKg4F0w
	HlhRHnGAkXw0z/oxpQONNj8MrI8jF9tDGEKQUM+OnlgsuLBqovJPzvyOnCYC7Fyl
	CRRAlSYwoOBQlD6X7YbshM3IZh29FuwgQBCdNBXF8+pSeQuFZrs3+A=
DKIM-Signature:	v=1; a=rsa-sha1; c=relaxed; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; s=default;
	bh=2ozZjCXZgjU4aIzq/uFvC8HDi/Y=; b=cvbePZ1JE1QZdabuP8A0jJb7qxIm
	AVF5piRh8kaHST9ay0AFVZmKBvvhtBcS8lm2sKLQUg2K5KRFCqJymQMKmPXq6WUQ
	oS6BUG2Q1qRK+v7OAtDaEVfLCHkNymrHEyND61wn9sjphaxQAae3dTpfHVMi3C8w
	RiGkaGiUSMzv4KE=
Mailing-List:	contact cygwin-help AT cygwin DOT com; run by ezmlm
List-Id:	<cygwin.cygwin.com>
List-Subscribe:	<mailto:cygwin-subscribe AT cygwin DOT com>
List-Archive:	<http://sourceware.org/ml/cygwin/>
List-Post:	<mailto:cygwin AT cygwin DOT com>
List-Help:	<mailto:cygwin-help AT cygwin DOT com>, <http://sourceware.org/ml/#faqs>
Sender:	cygwin-owner AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
Delivered-To:	mailing list cygwin AT cygwin DOT com
Authentication-Results:	sourceware.org; auth=none
X-Virus-Found:	No
X-Spam-SWARE-Status:	No, score=4.6 required=5.0 tests=AWL,BAYES_00,SPAM_BODY1 autolearn=no version=3.3.2
X-HELO:	calimero.vinschen.de
Date:	Fri, 10 Jan 2014 14:52:08 +0100
From:	Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To:	cygwin AT cygwin DOT com
Subject:	Re: Bringing up NFS server on 64 bits
Message-ID:	<20140110135208.GG10296@calimero.vinschen.de>
Reply-To:	cygwin AT cygwin DOT com
Mail-Followup-To:	cygwin AT cygwin DOT com
References:	<001701cf0e08$e399abe0$aacd03a0$%fedin AT samsung DOT com>
MIME-Version:	1.0
In-Reply-To:	<001701cf0e08$e399abe0$aacd03a0$%fedin@samsung.com>
User-Agent:	Mutt/1.5.21 (2010-09-15)

--DiL7RhKs8rK9YGuF
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jan 10 17:35, Pavel Fedin wrote:
>  Hello! I'm back with some more news.
>=20
>  Currently i am building and testing NFS Server for 64 bits. The following
> was done so far:
> - libtirpc package - fixed to always export svc_auth_none (see my previous
> message);
> - rpcgen package - successfully rebuilt and tested, works fine, no changes
> required;
> - nfs-server package - successfully rebuilt against libtirpc with patchin=
g.
> Testing is to be done.
> - rpcbind - ported to Cygwin. Testing is to be done.

Thanks for working on that.  It's highly appreciated.  Did you already
make yourself familiar with Cygwin package maintainance(*)?

>  Obsolete sunrpc package is almost not needed, except public headers in
> include/rpcsvc. The following subset of the is needed by rpcbind (here and
> below i will refer to C code at
> http://git.infradead.org/users/steved/rpcbind.git/blob/HEAD:/src/security=
.c)
> :
> --- cut ---
> #include <rpcsvc/mount.h>
> #include <rpcsvc/rquota.h>
> #include <rpcsvc/nfs_prot.h>
> #include <rpcsvc/yp.h>
> #include <rpcsvc/ypclnt.h>
> #include <rpcsvc/yppasswd.h>
> --- cut ---
>  6 files so far. To tell the truth i feel a bit bad about having to keep =
the
> complete obsolete package just for 6 files.
>=20
>  I noticed that mount.h and nfs_prot.h (together with .x from which they =
are
> generated) are available in a fresh version inside nfs-server source code.
> The only missing thing is copying them to /usr/include during installatio=
n,
> which can be easily fixed.
>  The rest are: rquota.h, yp.h, ypclnt.h and yppasswd.h. Their definitions
> are used only by check_callit() function, which obviously has something to
> do with security and forcibly denies some actions. There are several thin=
gs
> to be done with them and i'd like to discuss what's better:
>  1. Keep original sunrpc package in extremely reduced form, containing on=
ly
> include/rpcsvc directory (this is how my test build is done).
>  2. Pick up this thing and make a new package out of it:
> http://www.openbsd.org/cgi-bin/cvsweb/src/lib/librpcsvc/
>  3. Export NFS-related includes from nfs-server package (creating
> nfs-server-devel), and #ifdef the rest out.
>=20
>  Personally i like (3) most of all because it's the simplest thing to do =
and
> it won't pollute Cygwin with packages with almost no purpose. After all, =
who
> uses NIS nowadays ? The only thing that makes me feeling bad - what does
> this code actually do ? Won't disabling NIS-related stuff hurt security ?

(3) sounds right to me.  As for NIS, I don't think this is important,
especially not for the NFS server.  In theory the OS (Windows) decouples
the NFS server from having to look for NIS stuff by itself.  Account
info should be available via the OS (Cygwin) calls anyway and worse,
assuming the NFS server fetches info directly via NIS, the entire
user/group -> uid/gid -> SID mapping might be screwed up.


Corinna


(*) https://sourceware.org/cygwin/setup.html
    https://sourceware.org/cygwin-apps/package-upload.html


--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--DiL7RhKs8rK9YGuF
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1

iQIcBAEBAgAGBQJSz/sIAAoJEPU2Bp2uRE+g3oAP/R5f2MOwrJ9wL7xX9uJ7l7EX
AoyqGqWexWTs8ewClj7vvYZmdncRtiWuSZL64+J3iUjU6qK1rFpu5PUAJgA7V5OU
BlWalW2+uHgmoZj7oMpog5eUUaItILFMoIDPBPrBcesdLS2sFuNjk6tWKgJjWRsc
lE1vlIyqgvMFWjrUvCjOVqmr2J4zKqzNZDern3sHHsWFfgFQqpu13wrWlPbJU5/4
e8l4zHE95zeFj0YuEanFBhqGVKbGOuZLqv5Bt/g//FpB0Hvv6nMtScNiz1eSUqrd
128/Z03xULFUeB1gxHPWXiIHrCJ2miABFnOywjdXQVT4PkLuMd5+CUFitSfFDrt/
3V2IW8yYPT+BkA9HVGvoNCC33LJjX8JifKEpIhVMfl555O7jrsHMFyB8+AE430Hs
Adu5xgi3+RQ8rAsdaY6lVUjQ3SvK8Nw2YVY42HQ/4TaijUq3nRtaHyTwxcFj1yEE
2XiBXmbNH/y7HPwU3fcsaI1Xdl1i61hbtYjxyRt3mO1bOymBqLmqe1arU0KAzoRI
+ezRZTcPuHNO86+wyWGhUApxQ6iMckGCxS5QECo95xQ/kAFnaZr/fK3uWOfYavad
9K8PesQTXmQOjtYcG+3FERqWQBqeLfvnlFZPi1KR8XLHoXTr+URQtx24jNAcQkzO
8plndeZ8qzdW3m2OsiHc
=70Y8
-----END PGP SIGNATURE-----

--DiL7RhKs8rK9YGuF--

- Raw text -