From owner-freebsd-stable@FreeBSD.ORG Tue Jun 29 15:32:54 2010 Return-Path: Delivered-To: freebsd-stable@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 2101C1065673 for ; Tue, 29 Jun 2010 15:32:54 +0000 (UTC) (envelope-from rick@svn.kiwi-computer.com) Received: from svn.kiwi-computer.com (174-20-59-6.mpls.qwest.net [174.20.59.6]) by mx1.freebsd.org (Postfix) with SMTP id 961A88FC0C for ; Tue, 29 Jun 2010 15:32:53 +0000 (UTC) Received: (qmail 72176 invoked by uid 2000); 29 Jun 2010 15:32:52 -0000 Date: Tue, 29 Jun 2010 10:32:52 -0500 From: "Rick C. Petty" To: Adam Vande More Message-ID: <20100629153252.GA71786@kay.kiwi-computer.com> References: <20100627221607.GA31646@kay.kiwi-computer.com> <20100628031401.GA45282@kay.kiwi-computer.com> <20100628140054.GA52174@kay.kiwi-computer.com> <20100629134033.O9227@sola.nimnet.asn.au> Mime-Version: 1.0 Content-Type: text/plain; charset=us-ascii Content-Disposition: inline In-Reply-To: User-Agent: Mutt/1.4.2.3i Cc: Rick Macklem , freebsd-stable@freebsd.org, Ian Smith Subject: Re: Why is NFSv4 so slow? (root/toor) X-BeenThere: freebsd-stable@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list Reply-To: rick-freebsd2009@kiwi-computer.com List-Id: Production branch of FreeBSD source code List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Tue, 29 Jun 2010 15:32:54 -0000 On Tue, Jun 29, 2010 at 10:20:57AM -0500, Adam Vande More wrote: > On Tue, Jun 29, 2010 at 9:58 AM, Rick Macklem wrote: > > > I suppose if the FreeBSD world feels that "root" and "toor" must both > > exist in the password database, then "nfsuserd" could be hacked to handle > > the case of translating uid 0 to "root" without calling getpwuid(). It > > seems ugly, but if deleting "toor" from the password database upsets > > people, I can do that. > > I agree with Ian on this. I don't use toor either, but have seen people use > it, and sometimes it will get recommended here for various reasons e.g. > running a root account with a different default shell. It wouldn't bother > me having to do this provided it was documented, but having to do so would > be a POLA violation to many users I think. To be fair, I'm not sure this is even a problem. Rick M. only suggested it as a possibility. I would think that getpwuid() would return the first match which has always been root. At least that's what it does when scanning the passwd file; I'm not sure about NIS. If someone can prove that this will cause a problem with NFSv4, we could consider hackingit. Otherwise I don't think we should change this behavior yet. -- Rick C. Petty