Remove svn:mergeinfo carried over from stable/9.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

Copy stable/9 to releng/9.3 as part of the 9.3-RELEASE cycle.

Approved by: re (implicit)
Sponsored by: The FreeBSD Foundation

MFC: r252483
Document that NFSv4 mounts won't work if hostid_enable="NO" is set
in /etc/rc.conf because the host uuid is used to uniquely identify
the client to the server.
This is a content change.

MFC: r250162
Document the fact that an NFSv4 mount against a volume on the same host
can result in a hung NFS server and is not recommended.
This is a content change.

MFC: r244690
Attempt to clarify that for ZFS, all file systems under
the NFSv4 root must be exported. This is because ZFS
checks exports itself.
This is a content change.

MFC: r244447
Post r243965 the nfsd daemon will not start up for kernels
built without "options INET6". This patch fixes the problem.

MFC r241849:
Fix typo in error when unable to create TCP socket

PR: bin/172490
Approved by: cperciva (implicit)

Copy head to stable/9 as part of 9.0-RELEASE release cycle.

Approved by: re (implicit)

Remove duplicated header files

Fix the nfsv4 man page to reflect the changes related to
making the new NFS client and server the default.
This is a content change.

Patch the mountd and nfsd man pages to reflect the recent changes
done by r220980 to deprecate the -e option and add the -o option.
This is a content change for both man pages.

This patch changes the default NFS server to the new one, which was
referred to as the experimental server. It also adds a new command
line option "-o" to both mountd and nfsd that forces them to use the
old/regular NFS server. The "-e" option for these commands is now
a no-op, since the new server is the default. I will be committing rc
script and man changes soon. Discussed on freebsd-fs@.

Add stablerestart(5) to the See Also list for nfsd.8.
This is a content change.

Suggested by: Jeremy Chadwick
MFC after: 2 weeks

Revert r220809 since it put the entry in the wrong place
in the list and didn't change the date.

Add stablerestart(5) to the See Also list for nfsd(8).
This is a content change.

Suggested by: Jeremy Chadwick
MFC after: 2 weeks

Modify the man pages to reflect the addition of a backup
stable restart file, as done by r220510.
This is a content change.

MFC after: 2 weeks

Add support for a backup stable restart file to the nfsd,
used for NFSv4 restart. This permits the nfsd to create
the stable restart file as required and minimizes the risk
of trouble if the file is lost.

Suggested by: Tim Kientzle
Reviewed by: jhb
MFC after: 2 weeks

Save a copy of errno before invoking syslog() if accept() or select() fail.
syslog() can trash the errno value causing nfsd to exit for non-fatal
errors like ECONNABORTED from accept().

MFC after: 1 week

Fix typos, spelling, formatting and mdoc mistakes found by Nobuyuki while
translating these manual pages. Minor corrections by me.

Submitted by: Nobuyuki Koganemaru <n-kogane@syd.odn.ne.jp>

Fix typos and spelling mistakes.

mdoc: Garbage collect unused/unneeded macros

The last big commit: let usr.sbin/ use WARNS=6 by default.

ANSIfy almost all applications that use WARNS=6.

I was considering committing all these patches one by one, but as
discussed with brooks@, there is no need to do this. If we ever
need/want to merge these changes back, it is still possible to do this
per application.

Yet another cosmetic fix.

Cosmetical fixes.

Cosmetical fixes.

Use our canonical .Dd format.

Submitted by: Ulrich Spoerlein

Don't use sys/nfs/rpcv2.h - it is part of the old kernel RPC implementation
and will be removed.

Update the content of the nfsv4.4 man page to reflect the final
choice of variable names for rc.conf and option name for the
experimental server.
Also replace the inaccurate description of the nfsv4 root lines
in /etc/exports, mostly with a reference to exports(5).

Approved by: kib (mentor)

Re-format the nfsv4.4 man page so that all sentences start on a
new line.

Approved by: kib (mentor)

Change the "-4" argument for nfsd and mountd to "-e" to avoid
confusion, since it does not refer to IPv4 nor NFSv4, but to
running the experimental server instead of the regular one.

Approved by: kib (mentor)

Modify nfsd.c to add support for the experimental nfs server.
This includes the addition of a new flag "-4" that will force
use of the experimental server with nfsv4 support in it. This
commit also adds two new man pages to the repository that are
NFSv4 specific. One describes the file used by the server to
restart nfsv4 services safely. The other is a brief overview
of nfsv4 and its setup.

Reviewed by: dfr
Approved by: kib (mentor)

Implement support for RPCSEC_GSS authentication to both the NFS client
and server. This replaces the RPC implementation of the NFS client and
server with the newer RPC implementation originally developed
(actually ported from the userland sunrpc code) to support the NFS
Lock Manager. I have tested this code extensively and I believe it is
stable and that performance is at least equal to the legacy RPC
implementation.

The NFS code currently contains support for both the new RPC
implementation and the older legacy implementation inherited from the
original NFS codebase. The default is to use the new implementation -
add the NFS_LEGACYRPC option to fall back to the old code. When I
merge this support back to RELENG_7, I will probably change this so
that users have to 'opt in' to get the new code.

To use RPCSEC_GSS on either client or server, you must build a kernel
which includes the KGSSAPI option and the crypto device. On the
userland side, you must build at least a new libc, mountd, mount_nfs
and gssd. You must install new versions of /etc/rc.d/gssd and
/etc/rc.d/nfsd and add 'gssd_enable=YES' to /etc/rc.conf.

As long as gssd is running, you should be able to mount an NFS
filesystem from a server that requires RPCSEC_GSS authentication. The
mount itself can happen without any kerberos credentials but all
access to the filesystem will be denied unless the accessing user has
a valid ticket file in the standard place (/tmp/krb5cc_<uid>). There
is currently no support for situations where the ticket file is in a
different place, such as when the user logged in via SSH and has
delegated credentials from that login. This restriction is also
present in Solaris and Linux. In theory, we could improve this in
future, possibly using Brooks Davis' implementation of variant
symlinks.

Supporting RPCSEC_GSS on a server is nearly as simple. You must create
service creds for the server in the form 'nfs/<fqdn>@<REALM>' and
install them in /etc/krb5.keytab. The standard heimdal utility ktutil
makes this fairly easy. After the service creds have been created, you
can add a '-sec=krb5' option to /etc/exports and restart both mountd
and nfsd.

The only other difference an administrator should notice is that nfsd
doesn't fork to create service threads any more. In normal operation,
there will be two nfsd processes, one in userland waiting for TCP
connections and one in the kernel handling requests. The latter
process will create as many kthreads as required - these should be
visible via 'top -H'. The code has some support for varying the number
of service threads according to load but initially at least, nfsd uses
a fixed number of threads according to the value supplied to its '-n'
option.

Sponsored by: Isilon Systems
MFC after: 1 month

Previous revision was broken on SPARC, fix it by using more appropriate type.

Reported by: tindebox
Pointy hat to: delphij

Use size_t for length.

Bump the default maximum on nfsd processes from 20 to 256. Real-world
measurements suggest that higher degrees of parallelism for large
numbers of clients help performance substantially.

Submitted by: Eric Anderson <anderson at centtech dot com>

Added the EXIT STATUS section where appropriate.

ANSI'fy nfsd(8) and some minor changes to make it WARNS=6 clean.

This commit does not affect the code generated, as proven by md5'ing
resulting binaries.

Bump WARNS accordingly.

Compiled on: sparc64, ia64, i386
Reviewed by: alfred (but blame me if anything goes wrong :-)

Per letter dated July 22, 1999 remove 3rd clause of Berkeley derived software
(with permission of addtional copyright holders where appropriate)

Mechanically kill hard sentence breaks.

Add a cross reference to exports(5). While exports is not directly
tied to nfsd(8), exports is the configuration file users will most
likely need to configure when dealing with a NFS server.

Submitted by: Florian Hars <hars@bik-gmbh.de>
PR: docs/64714
MFC after: 3 days

Problem:

When an NFS server is port-scanned nfsd sometimes exits. This has
happened 3 times the last few weeks.

Nfsd has been written to exit when accept(2) fails. Unfortunately
accept can sometimes make a "normal" return with errno ECONNABORTED
and in this case nfsd exits prematurely.

Solution:

Check for ECONNABORTED (and also EINTR, since nfsd uses signals)
and continue.

Submitted by: Bjoern Groenvall <bg@sics.se>
PR: 61084

style.Makefile(5)

Update manpage to match the code, vfsload() is not used
here since some time, kldload() is used instead.

Bah, I forgot to commit this part of the nfssvc() cleanup. Sorry folks.

use IPV6_V6ONLY instead of non standard IPV6_BINDV6ONLY.

MFC after: 1 week

Initialize sockbits variable with FD_ZERO, to avoid passing a fd_set
with random garbage in lower bits corresponding to stdin, stdout and
stderr to select(2).

This fixes the problem with nfsd sometimes getting stuck in a tight
select(2) loop eating 100% CPU time.

Reviewed by: iedowse
Approved by: obrien

The .Nm utility

Fix spelling nit in error message.

Make this compile and not segfault on ia64. ptr = strdup("foo"); is
fatal if the declaration of strdup() isn't in scope. The upper 32 bits
of the pointer are lost since it defaults to returning "int". Fix some
warnings while here, including trying to make gcc-3.1 happy.

Fix problem in macro definition breaking compiles with -DDEBUG.

PR: bin/35773
Submitted by: Thomas Quinot <thomas@cuivre.fr.eu.org>

Default to WARNS=2.
Binary builds that cannot handle this must explicitly set WARNS=0.

Reviewed by: mike

When nfsd was started with only UDP servers, the master nfsd would
spin in a loop eating CPU time. This bug has existed since the
TI-RPC import. The problem is that we should only enter the select
loop if at least one TCP server was started. Fix this by having
the master nfsd become a UDP server itself if there are no TCP
servers.

Also improve/correct the code for cleaning up slave nfsd processes
and unregistering with rpcbind when the master nfsd exits.

One issue that remains open is that if a slave nfsd dies, then all
nfsds will shut down. This is because nfssvc() in the master nfsd
returns 0 when the master nfsd receives a SIGCHLD.

Submitted by: tmm

Deal with nfs server module changes for autoloading.

Userland part of nfs client/server split and cleanup.

mdoc(7) police: utilize the new .Ex macro.

Remove whitespace at EOL.

mdoc(7) police: sort SEE ALSO xrefs (sort -b -f +2 -3 +1 -2).

- Backout botched attempt to introduce MANSECT feature.
- MAN[1-9] -> MAN.

Don't call daemon() and setup our signal handlers until after we check
and do the unregister/reregister work.

Don't call syslog in the unregister/reregister code as we haven't called
openlog() yet.

Be a more conservative about accepting errno values from socket(2),
only EPROTONOSUPPORT means that the kernel isn't supporting it
something like INET6. The other possible errnos would be returned
if there was a mistake in the socket(2) call so remove them from the
list of "acceptable" return values.

Disable ipv6 when getnetconfigent("udp6"/"tcp6") fails.

Submitted by: Martin Blapp <mb@imp.ch>

Set the default manual section for sbin/ to 8.

mdoc(7) police: fixes to the previous revision:

- fixed bad formatting
- avoid using German
- removed hard sentence break

Bring in a hybrid of SunSoft's transport-independent RPC (TI-RPC) and
associated changes that had to happen to make this possible as well as
bugs fixed along the way.

Bring in required TLI library routines to support this.

Since we don't support TLI we've essentially copied what NetBSD
has done, adding a thin layer to emulate direct the TLI calls
into BSD socket calls.

This is mostly from Sun's tirpc release that was made in 1994,
however some fixes were backported from the 1999 release (supposedly
only made available after this porting effort was underway).

The submitter has agreed to continue on and bring us up to the
1999 release.

Several key features are introduced with this update:
Client calls are thread safe. (1999 code has server side thread
safe)
Updated, a more modern interface.

Many userland updates were done to bring the code up to par with
the recent RPC API.

There is an update to the pthreads library, a function
pthread_main_np() was added to emulate a function of Sun's threads
library.

While we're at it, bring in NetBSD's lockd, it's been far too
long of a wait.

New rpcbind(8) replaces portmap(8) (supporting communication over
an authenticated Unix-domain socket, and by default only allowing
set and unset requests over that channel). It's much more secure
than the old portmapper.

Umount(8), mountd(8), mount_nfs(8), nfsd(8) have also been upgraded
to support TI-RPC and to support IPV6.

Umount(8) is also fixed to unmount pathnames longer than 80 chars,
which are currently truncated by the Kernel statfs structure.

Submitted by: Martin Blapp <mb@imp.ch>
Manpage review: ru
Secure RPC implemented by: wpaul

mdoc(7) police: use the new features of the Nm macro.

Don't use libutil now that setproctitle() is in libc

Remove single-space hard sentence breaks. These degrade the quality
of the typeset output, tend to make diffs harder to read and provide
bad examples for new-comers to mdoc.

Use libcrypto instead of libdes.

Thresh-out the nfs manual page references a bit

Reviewed by: Julian Elischer <julian@elischer.org>

Give nfsd the ability to bind to specific IP addresses through the -h
option and add explicit option to bind to the wildcard address. The
default is to bind to the wildcard address when no -h option has been
specified and thus backwards compatibility is maintained.

PR: kern/13049
Reviewed by: David Malone <dwmalone@maths.tcd.ie>
Submitted by: Matt Dillon <dillon@freebsd.org>, David Malone <dwmalone@maths.tcd.ie>

$Id$ -> $FreeBSD$

Add $Id$ to these manpages.

Approved by: bde

Update refs for KLD's and kldload.

Submitted by: Nathan Ahlstrom <nrahlstr@winternet.com>

Do not dot terminate syslog() string. Remove unused #includes. Add rcsid. -Wall.

Don't give examples or use the depreciated usage to nfsd

PR: 5635

Removed definition of _NEW_VFSCONF. The new vfsconf interface is now
the default.

Fix two missing arguments detected by "-Wformat".

compare return value from getopt against -1 rather than EOF, per the final
posix standard on the topic.

Merge from Lite2 (use new getvfsbyname() interface)

Use the .Bx macro where appropriate.

Default to udp if neither udp nor tcp is specified. The previous revision
was broken. It forced udp in all cases except the extremely unusual case
argc == 0.

default to udp if no flags specified...closes PR#bin/759
- should this be documented in the man page?

#include <kerberosIV/des.h> -> #include <des.h>

oops, do it right this time

Link with libutil for kerberos too

Make nfsd use setproctitle from libutil...

Old code is still #ifdef OLD_SETPROCTITLE for comparison with the old
code.

The version of setproctitle() inside nfsd was busted. It was not terminating
the argv array, causing parts of the argv[0] to be picked up several times
by libkvm, causing strange ps results for the nfs-server and nfs-master
processes.. :-]

(How many copies of setproctitle() do we need anyway? NetBSD has it in
libc and BSDI have it in libutil.)

Changes to support version 3 of the NFS protocol.
The version 2 support has been tested (client+server) against FreeBSD-2.0,
IRIX 5.3 and FreeBSD-current (using a loopback mount). The version 2 support
is stable AFAIK.
The version 3 support has been tested with a loopback mount and minimally
against an IRIX 5.3 server. It needs more testing and may have problems.
I have patched amd to support the new variable length filehandles although
it will still only use version 2 of the protocol.

Before booting a kernel with these changes, nfs clients will need to at least
build and install /usr/sbin/mount_nfs. Servers will need to build and
install /usr/sbin/mountd.

NFS diskless support is untested.

Obtained from: Rick Macklem <rick@snowhite.cis.uoguelph.ca>

Add support for kerberised NQNFS.

Automatically load NFS and a bevy of other filesystems.

Use nulls to pad proctitle rather than spaces...makes ps(1) output more
readable.

Delete obsolete references to librpc.a.

Convert to our man installation style. Also fixed long-standing bug
in `fastboot'/`fasthalt' in which the interpreter would hang around
after `reboot' or `halt' is run, causing an irritating ``Killed'' message.

BSD 4.4 Lite sbin Sources

Note: XNSrouted and routed NOT imported here, they shall be imported with
usr.sbin.