Skip site navigation (1)Skip section navigation (2)

FreeBSD Manual Pages

  
 
  

home | help
GSSD(8) 		     System Manager's Manual			 GSSD(8)

NAME
     gssd -- Generic Security Services Daemon

SYNOPSIS
     gssd [-d] [-h] [-v] [-s dir-list] [-c file-substring] [-r preferred-realm]

DESCRIPTION
     The gssd program provides support for the kernel GSS-API implementation.

     The options are as follows:

     -d      Run  in  debug  mode.   In  this  mode,  gssd will not fork when it
	     starts.

     -h      Enable support for host-based initiator credentials.  This  permits
	     a	kerberized  NFS  mount to use a service principal in the default
	     Kerberos 5 keytab file for access.  Such access is enabled via  the
	     gssname option for the mount_nfs(8) command.

     -v      Run in verbose mode.  In this mode, gssd will log activity messages
	     to  syslog  using LOG_INFO | LOG_DAEMON or to stderr, if the -d op-
	     tion has also been specified.  The minor status is logged as a dec-
	     imal number, since it is actually a Kerberos return  status,  which
	     is signed.

     -s dir-list
	     Look  for	an appropriate credential cache file in this list of di-
	     rectories.  The list should be full pathnames from root,  separated
	     by ':' characters.  Usually this list will simply be "/tmp".  With-
	     out  this	option,  gssd  assumes that the credential cache file is
	     called /tmp/krb5cc_<uid>, where <uid> is the effective uid for  the
	     RPC caller.

     -c file-substring
	     Set  a  file-substring  for  the credential cache file names.  Only
	     files with this substring embedded in their names will be	selected
	     as candidates when -s has been specified.	If not specified, it de-
	     faults to "krb5cc_".

     -r preferred-realm
	     Use  Kerberos credentials for this realm when searching for creden-
	     tials in directories specified with -s.  If not specified, the  de-
	     fault Kerberos realm will be used.

FILES
     /etc/krb5.keytab  Contains Kerberos service principals which may be used as
		       credentials by kernel GSS-API services.

EXIT STATUS
     The gssd utility exits 0 on success, and >0 if an error occurs.

SEE ALSO
     gssapi(3), syslog(3), mount_nfs(8)

HISTORY
     The gssd manual page first appeared in FreeBSD 8.0.

AUTHORS
     This manual page was written by Doug Rabson <dfr@FreeBSD.org>.

FreeBSD ports 15.quarterly	 April 10, 2020 			 GSSD(8)

Want to link to this manual page? Use this URL:
<https://man.freebsd.org/cgi/man.cgi?query=gssd&sektion=8&manpath=FreeBSD+15.1-RELEASE+and+Ports.quarterly>

home | help