On Fri, Jan 12, 2007 at 10:51:28AM +0000, Darren J Moffat wrote: > Roland Mainz wrote: > >Is there any way to add support for 1) Kerberos5 and 2) Solaris's > >secure_rpc API ? Both may be very usefull if data need to be exchanged > >at sites which have one of these "secure authetification" schemes > >configured... > > GSSAPI/Kerberos are network authentication protocols what we want here > is access to an encryption key. > > Maybe I haven't had enough coffee yet today but I don't understand how > you would use Kerberos or GSSAPI in this case, can you expand on the use > case a bit more please.
No, I agree: there's no network protocol in lofi(7d), therefore there is no place for RPCSEC_GSS, the GSS-API, or raw Kerberos V here. There may be a protocol layered below lofi (lofi of an NFS-mounted file), or above lofi (sharing a filesystem on a lofi device), but lofi plays no role there. iSCSI is another story. Perhaps Roland was thinking of iSCSI? Nico --
