| diff -up nfs-utils-1.3.0/systemd/nfs.systemd.man.orig nfs-utils-1.3.0/systemd/nfs.systemd.man |
| --- nfs-utils-1.3.0/systemd/nfs.systemd.man.orig 2018-07-21 06:10:06.938288975 -0400 |
| +++ nfs-utils-1.3.0/systemd/nfs.systemd.man 2018-07-21 06:10:18.888434798 -0400 |
| @@ -79,7 +79,7 @@ unit should be enabled. |
| Several other units which might be considered to be optional, such as |
| .I rpc-gssd.service |
| are careful to only start if the required configuration file exists. |
| -.I rpc-gsdd.service |
| +.I rpc-gssd.service |
| will not start if the |
| .I krb5.keytab |
| file does not exist (typically in |
| @@ -120,10 +120,11 @@ be needed to reduce system load to an ab |
| attack surface by not running daemons that are not absolutely |
| required. |
| .PP |
| -Two particular services which this can apply to are |
| -.I rpcbind |
| +Three particular services which this can apply to are |
| +.IR rpcbind , |
| +.IR idmapd , |
| and |
| -.IR idmapd . |
| +.IR rpc-gssd . |
| .I rpcbind |
| is not part of the |
| .I nfs-utils |
| @@ -155,6 +156,15 @@ is not needed and not wanted, it can be |
| .RS |
| .B systemctl mask idmapd |
| .RE |
| +.I rpc-gssd |
| +is assumed to be needed if the |
| +.I krb5.keytab |
| +file is present. If a site needs this file present but does not want |
| +.I rpc-gssd |
| +running, it can be masked with |
| +.RS |
| +.B systemctl mask rpc-gssd |
| +.RE |
| .SH FILES |
| /etc/nfs.conf |
| .br |