On 15/12/16 09:50, Sven Geggus wrote: > Daniel Pocock schrieb am Mittwoch, den 14. Dezember um 13:35 Uhr: > >> If the latest NFS / kernel combination in sid definitely won't work >> without gss-proxy then you could open an RC bug against the nfs-utils >> package on that basis. > > I assume, that it does work (as it also works in stable), but it definitely > comes with a DOS included: > > If your kerberos tickets get too big the whole NFS server freezes. In > practice this kind of kerberos ticket will arise in AD environments where > people are members of a lot of groups. >
Could you please open a specific bug for that issue and include the options: - include svcgssd with this known risk - stop including svcgssd in nfs-utils, people who want this functionality need to follow the gssproxy ITP