DomainKey-Signature: a=rsa-sha1; c=nofws; d=sourceware.org; h=list-id
	:list-unsubscribe:list-subscribe:list-archive:list-post
	:list-help:sender:date:from:to:subject:message-id:reply-to
	:references:mime-version:content-type:in-reply-to; q=dns; s=
	default; b=LRaNFtGv4bXjo4bdn/1lOKW70OoyuI6bCOA3zy19pfcO0kyKg4F0w
	HlhRHnGAkXw0z/oxpQONNj8MrI8jF9tDGEKQUM+OnlgsuLBqovJPzvyOnCYC7Fyl
	CRRAlSYwoOBQlD6X7YbshM3IZh29FuwgQBCdNBXF8+pSeQuFZrs3+A=
Mailing-List: contact cygwin-help AT cygwin DOT com; run by ezmlm
Sender: cygwin-owner AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
Date: Fri, 10 Jan 2014 14:52:08 +0100
From: Corinna Vinschen <corinna-cygwin AT cygwin DOT com>
To: cygwin AT cygwin DOT com
Subject: Re: Bringing up NFS server on 64 bits
Message-ID: <20140110135208.GG10296@calimero.vinschen.de>
Reply-To: cygwin AT cygwin DOT com
Mail-Followup-To: cygwin AT cygwin DOT com
References: <001701cf0e08$e399abe0$aacd03a0$%fedin AT samsung DOT com>
MIME-Version: 1.0
Content-Type: multipart/signed; micalg=pgp-sha1;	protocol="application/pgp-signature"; boundary="DiL7RhKs8rK9YGuF"
Content-Disposition: inline
In-Reply-To: <001701cf0e08$e399abe0$aacd03a0$%fedin@samsung.com>
User-Agent: Mutt/1.5.21 (2010-09-15)

--DiL7RhKs8rK9YGuF
Content-Type: text/plain; charset=utf-8
Content-Disposition: inline
Content-Transfer-Encoding: quoted-printable

On Jan 10 17:35, Pavel Fedin wrote:
>  Hello! I'm back with some more news.
>=20
>  Currently i am building and testing NFS Server for 64 bits. The following
> was done so far:
> - libtirpc package - fixed to always export svc_auth_none (see my previous
> message);
> - rpcgen package - successfully rebuilt and tested, works fine, no changes
> required;
> - nfs-server package - successfully rebuilt against libtirpc with patchin=
g.
> Testing is to be done.
> - rpcbind - ported to Cygwin. Testing is to be done.

Thanks for working on that.  It's highly appreciated.  Did you already
make yourself familiar with Cygwin package maintainance(*)?

>  Obsolete sunrpc package is almost not needed, except public headers in
> include/rpcsvc. The following subset of the is needed by rpcbind (here and
> below i will refer to C code at
> http://git.infradead.org/users/steved/rpcbind.git/blob/HEAD:/src/security=
.c)
> :
> --- cut ---
> #include <rpcsvc/mount.h>
> #include <rpcsvc/rquota.h>
> #include <rpcsvc/nfs_prot.h>
> #include <rpcsvc/yp.h>
> #include <rpcsvc/ypclnt.h>
> #include <rpcsvc/yppasswd.h>
> --- cut ---
>  6 files so far. To tell the truth i feel a bit bad about having to keep =
the
> complete obsolete package just for 6 files.
>=20
>  I noticed that mount.h and nfs_prot.h (together with .x from which they =
are
> generated) are available in a fresh version inside nfs-server source code.
> The only missing thing is copying them to /usr/include during installatio=
n,
> which can be easily fixed.
>  The rest are: rquota.h, yp.h, ypclnt.h and yppasswd.h. Their definitions
> are used only by check_callit() function, which obviously has something to
> do with security and forcibly denies some actions. There are several thin=
gs
> to be done with them and i'd like to discuss what's better:
>  1. Keep original sunrpc package in extremely reduced form, containing on=
ly
> include/rpcsvc directory (this is how my test build is done).
>  2. Pick up this thing and make a new package out of it:
> http://www.openbsd.org/cgi-bin/cvsweb/src/lib/librpcsvc/
>  3. Export NFS-related includes from nfs-server package (creating
> nfs-server-devel), and #ifdef the rest out.
>=20
>  Personally i like (3) most of all because it's the simplest thing to do =
and
> it won't pollute Cygwin with packages with almost no purpose. After all, =
who
> uses NIS nowadays ? The only thing that makes me feeling bad - what does
> this code actually do ? Won't disabling NIS-related stuff hurt security ?

(3) sounds right to me.  As for NIS, I don't think this is important,
especially not for the NFS server.  In theory the OS (Windows) decouples
the NFS server from having to look for NIS stuff by itself.  Account
info should be available via the OS (Cygwin) calls anyway and worse,
assuming the NFS server fetches info directly via NIS, the entire
user/group -> uid/gid -> SID mapping might be screwed up.


Corinna


(*) https://sourceware.org/cygwin/setup.html
    https://sourceware.org/cygwin-apps/package-upload.html


--=20
Corinna Vinschen                  Please, send mails regarding Cygwin to
Cygwin Maintainer                 cygwin AT cygwin DOT com
Red Hat

--DiL7RhKs8rK9YGuF
Content-Type: application/pgp-signature

-----BEGIN PGP SIGNATURE-----
Version: GnuPG v1
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=70Y8
-----END PGP SIGNATURE-----

--DiL7RhKs8rK9YGuF--