[debian-lan-devel] [SCM] Debian-LAN development and packaging branch, master, updated. 3830a49979c53ef2938633e036adc60eb52aa954

[Andreas B. Mundt]

The following commit has been merged in the master branch:
commit 27f0ce2b02b8162e8a78d052819b544a975e4ce8
Author: Andreas B. Mundt <andi.mundt at web.de>
Date:   Sat Jan 28 11:13:48 2012 +0100

    Allow only kerberized access to NFS

diff --git a/fai/config/scripts/NFS_SERVER/10-config b/fai/config/scripts/NFS_SERVER/10-config
index 3bbb4f4..2b265fa 100755
--- a/fai/config/scripts/NFS_SERVER/10-config
+++ b/fai/config/scripts/NFS_SERVER/10-config
@@ -25,9 +25,9 @@ editfiles:
 	}
 
 	{ ${target}/etc/exports
-	  ## NFS4 without the need to use kerberos for now:
-	  AppendIfNoSuchLine "/srv/nfs4  10.0.0.0/24(sec=krb5p:krb5i:krb5:sys,rw,sync,fsid=0,crossmnt,no_subtree_check)"
-	  AppendIfNoSuchLine "/srv/nfs4/home0  10.0.0.0/24(sec=krb5p:krb5i:krb5:sys,rw,sync,no_subtree_check)"
+	  ## kerberized NFS4:
+	  AppendIfNoSuchLine "/srv/nfs4        10.0.0.0/8(sec=krb5p:krb5i,rw,sync,fsid=0,crossmnt,no_subtree_check)"
+	  AppendIfNoSuchLine "/srv/nfs4/home0  10.0.0.0/8(sec=krb5p:krb5i,rw,sync,no_subtree_check)"
 	}
 
 	{ ${target}/etc/fstab

-- 
Debian-LAN development and packaging