<div dir="ltr"><div class="gmail_extra"><div class="gmail_quote"><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex"><div dir="ltr"><div class="gmail_extra"><br><div class="gmail_quote"><span class="">2015-01-09 10:11 GMT+01:00 Alexander Bokovoy <span dir="ltr"><<a href="mailto:abokovoy@redhat.com" target="_blank">abokovoy@redhat.com</a>></span>:</span><span class=""><blockquote class="gmail_quote" style="margin:0px 0px 0px 0.8ex;border-left-width:1px;border-left-color:rgb(204,204,204);border-left-style:solid;padding-left:1ex">
On Fedora 21 we have /etc/request-key.d/cifs.<u></u>upcall.conf and<br>
/etc/request-key.d/cifs.idmap.<u></u>conf to allow kernel to properly fetch<br>
Kerberos keys and map IDs of CIFS identities. These configurations are<br>
part of cifs-utils package which also supplies mount.cifs.<span><font color="#888888"><br>
<br></font></span></blockquote><div><br></div></span><div></div></div></div></div></blockquote><div><br></div><div>I have no /etc/request-key.d/cifs.<u></u>upcall.conf on my F21. Is it suppose to be there?</div><div>This is what I have:</div><div><br></div><div><div>[root@ipaserver etc]# cat request-key.conf</div><div>###############################################################################</div><div># .... snip .... </div><div>################################################################################</div><div><br></div><div>#OP TYPE DESCRIPTION CALLOUT INFO PROGRAM ARG1 ARG2 ARG3 ...</div><div>#====== ======= =============== =============== ===============================</div><div>create dns_resolver * * /sbin/key.dns_resolver %k</div><div>create user debug:* negate /bin/keyctl negate %k 30 %S</div><div>create user debug:* rejected /bin/keyctl reject %k 30 %c %S</div><div>create user debug:* expired /bin/keyctl reject %k 30 %c %S</div><div>create user debug:* revoked /bin/keyctl reject %k 30 %c %S</div><div>create user debug:loop:* * |/bin/cat</div><div>create user debug:* * /usr/share/keyutils/request-key-debug.sh %k %d %c %S</div><div>negate * * * /bin/keyctl negate %k 30 %S</div><div><br></div><div>[root@ipaserver etc]# ls request-key.d/</div><div>cifs.idmap.conf cifs.spnego.conf id_resolver.conf</div><div><br></div><div>[root@ipaserver etc]# cat request-key.d/cifs.idmap.conf</div><div>create cifs.idmap * * /usr/sbin/cifs.idmap %k</div><div><br></div><div>[root@ipaserver etc]# cat request-key.d/cifs.spnego.conf</div><div>create cifs.spnego * * /usr/sbin/cifs.upcall %k</div></div><div><br></div><div><br></div><div>-- john</div><div><br></div></div></div></div>