Add exported_lock guards for NFSv4 server

This adds protection for reading of secinfo data, exi_public, exi_visible,
and namespace tree operations.

refs #3377

(cherry picked from commit b78b2fc4e3

Add exported_lock guards for NFSv4 server

This adds protection for reading of secinfo data, exi_public, exi_visible,
and namespace tree operations.

refs #3377

(cherry picked from commit b78b2fc4e3e07cc3514ae1cb332e7f5f74c91068)

show more ...

6911 nfs4: unexpected permission denied
Reviewed by: Simon Klinkert <simon.klinkert@gmail.com>

refs #3191

(cherry picked from commit 4526c1a75b3bdab802592cc2c97e78323086bf0f)

backout: 6090 IOPS, bandwidth, and latency kstats for NFS server
(Performance issues discovered)
This reverts commit 22146ea93e24c7deb02c49c33b2ab98605ce78b4.

(cherry picked from commit f7877f5d399

backout: 6090 IOPS, bandwidth, and latency kstats for NFS server
(Performance issues discovered)
This reverts commit 22146ea93e24c7deb02c49c33b2ab98605ce78b4.

(cherry picked from commit f7877f5d39900cfd8b20dd673e5ccc1ef7cc7447)

show more ...

nfssrv: don't hold exported_lock during compound processing

Instead rely on exi_hold/exi_rele the same way nfs3 does.

refs #3075

(cherry picked from commit 53d2e830bb37407aaa57ae3402a3122492f5eaa6)

6090 IOPS, bandwidth, and latency kstats for NFS server
Reviewed by: Josef 'Jeff' Sipek <josef.sipek@nexenta.com>
Reviewed by: Richard Elling <Richard.Elling@RichardElling.com>
Approved by: Dan McDon

6090 IOPS, bandwidth, and latency kstats for NFS server
Reviewed by: Josef 'Jeff' Sipek <josef.sipek@nexenta.com>
Reviewed by: Richard Elling <Richard.Elling@RichardElling.com>
Approved by: Dan McDonald <danmcd@omniti.com>

show more ...

5509 nfsauth_cache_get() could spend a lot of time walking exi_cache
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Robert Mustacchi <rm@joyent.com>
Approved by: Dan McDonald <danmcd

5509 nfsauth_cache_get() could spend a lot of time walking exi_cache
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Robert Mustacchi <rm@joyent.com>
Approved by: Dan McDonald <danmcd@omniti.com>

show more ...

4995 panic in nlm_prog_4
Reviewed by: Bryan Cantrill <bryan@joyent.com>
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Dan McDonald <danmcd@omniti.com>
Reviewed by: Marcel Telka <mar

4995 panic in nlm_prog_4
Reviewed by: Bryan Cantrill <bryan@joyent.com>
Reviewed by: Gordon Ross <gordon.ross@nexenta.com>
Reviewed by: Dan McDonald <danmcd@omniti.com>
Reviewed by: Marcel Telka <marcel@telka.sk>
Approved by: Richard Lowe <richlowe@richlowe.net>

show more ...

5002 Possible buffer overflow in makefh3()
Reviewed by: Dan McDonald <danmcd@omniti.com>
Reviewed by: Garrett D'Amore <garrett@damore.org>
Approved by: Robert Mustacchi <rm@joyent.com>

6970064 missing VN_RELE in exportfs

6930814 share/unshare issues
6931194 exportfs() uses exportinfo_t after dropping exported_lock and without doing exi_count++
6836258 exportinfo 16-way hash is too small
6953045 Put implementation of

6930814 share/unshare issues
6931194 exportfs() uses exportinfo_t after dropping exported_lock and without doing exi_count++
6836258 exportinfo 16-way hash is too small
6953045 Put implementation of the Pearson's hashing algorithm into a separate file

show more ...

backout 6930814: causes 6960023

6930814 share/unshare issues
6931194 exportfs() uses exportinfo_t after dropping exported_lock and without doing exi_count++
6836258 exportinfo 16-way hash is too small
6953045 Put implementation of

6930814 share/unshare issues
6931194 exportfs() uses exportinfo_t after dropping exported_lock and without doing exi_count++
6836258 exportinfo 16-way hash is too small
6953045 Put implementation of the Pearson's hashing algorithm into a separate file

show more ...

6922286 directly mounting snapshots with NFSv3 fails

4799074 NFS authentication cache needs some sort of TTL

backout 4799074: panics gate machines

4799074 NFS authentication cache needs some sort of TTL

6901748 mvfs and nfs pseudo namespace tree do not work together
6926015 dead code in exportfs()

6840231 Panic in treeclimb_export()->checkexport4()
6840163 Variable treenode_t *ns_root should be declared as extern in export.h
6840149 "#define EXPTABLESIZE 16" is twice in the source
6834678 typo

6840231 Panic in treeclimb_export()->checkexport4()
6840163 Variable treenode_t *ns_root should be declared as extern in export.h
6840149 "#define EXPTABLESIZE 16" is twice in the source
6834678 typo in /usr/include/nfs/export.h

show more ...

5078057 nfsv4 needs to release hold on shared FS if this FS got forcibly unmounted

6751647 TRANS2_FIND_NEXT continuation by filename restarts search at beginning of directory
6753904 SVCCTL server side service
6741484 Local users cannot connect to CIFS shares from MacOS 10.5
674689

6751647 TRANS2_FIND_NEXT continuation by filename restarts search at beginning of directory
6753904 SVCCTL server side service
6741484 Local users cannot connect to CIFS shares from MacOS 10.5
6746898 win98 can not overwrite *.files
6753310 Incorrect handling of SmbNegotiate request when invalid dialects are negotiated.
6751123 Unable to join domain, core dump generated with IPMP setting
6722437 SMB_TRANS2_FIND returns wrong status code when stream file is passed
6716578 can not delete file in extended attribute name space in cifs client when cifs server is solaris
PSARC 2008/584 Correction in nbmand behavior
6734067 Long delay when viewing MS Word Read-only file properties with nbmand enabled.
PSARC/2007/281 NFS share properties for Montana compatibility
6475452 Need Solaris support for Montana approve file functionality in NFS
6582170 Host-based access control (approve file)
6749075 Unable to join domain if user password exceeds 20 characters
6612716 Join domain fails if hostname is > 15 chars
6753251 server signing: wrong signature is generated for the NetShareEnum reply
6757521 SMB daemon leaks memory after displaying GSS status
6760315 Local user cannot connnect to CIFS shares if CIFS server's hostname is not specified
6757333 Share publisher thread runs into infinite loop of displaying GSS major/minor status
6757132 smbd crashes at smb_idmap_batch_getmappings
6760876 security descriptor decoding function has a glitch
6761491 Cannot open or delete a named stream on a directory file.
6741449 Cleanup list in smbns_ads module
6593958 Users with restore privilege can take ownership of files

--HG--
rename : usr/src/lib/smbsrv/libmlsvc/common/secdb.c => usr/src/lib/smbsrv/libmlsvc/common/smb_logon.c
rename : usr/src/lib/smbsrv/libmlsvc/common/mlsvc_svcctl.c => usr/src/lib/smbsrv/libmlsvc/common/svcctl_svc.c

show more ...

4175972 rmdir of shared directory results in filesystem corruption
6670800 Wrong security flavor ref count after non file system root dir is reshared

6618772 sec flavor refs are not propagated correctly when a pseudo export is shared

6608715 server must only decrement and propagate refs for explicitly shared flavors

PSARC/2007/218 caller_context_t in all VOPs
PSARC/2007/227 VFS Feature Registration and ACL on Create
PSARC/2007/244 ZFS Case-insensitive support
PSARC/2007/315 Extensible Attribute Interfaces
PSARC/

PSARC/2007/218 caller_context_t in all VOPs
PSARC/2007/227 VFS Feature Registration and ACL on Create
PSARC/2007/244 ZFS Case-insensitive support
PSARC/2007/315 Extensible Attribute Interfaces
PSARC/2007/394 ls(1) new command line options '-/' and '-%': CIFS system attributes support
PSARC/2007/403 Modified Access Checks for CIFS
PSARC/2007/410 Add system attribute support to chmod(1)
PSARC/2007/432 CIFS system attributes support for cp(1), pack(1), unpack(1), compress(1) and uncompress(1)
PSARC/2007/444 Rescind SETTABLE Attribute
PSARC/2007/459 CIFS system attributes support for cpio(1), pax(1), tar(1)
PSARC/2007/546 Update utilities to match CIFS system attributes changes.
PSARC/2007/560 ZFS sharesmb property
4890717 want append-only files
6417428 Case-insensitive file system name lookup to support CIFS
6417435 DOS attributes and additional timestamps to support for CIFS
6417442 File system quarantined and modified attributes to support an integrated Anti-Virus service
6417453 FS boolean property for rejecting/allowing invalid UTF-8 sequences in file names
6473733 RFE: Need support for open-deny modes
6473755 RFE: Need ability to reconcile oplock and delegation conflicts
6494624 sharemgr needs to support CIFS shares better
6546705 All vnode operations need to pass caller_context_t
6546706 Need VOP_SETATTR/VOP_GETATTR to support new, optional attributes
6546893 Solaris system attribute support
6550962 ZFS ACL inheritance needs to be enhanced to support Automatic Inheritance
6553589 RFE: VFS Feature Registration facility
6553770 RFE: ZFS support for ACL-on-CREATE (PSARC 2007/227)
6565581 ls(1) should support file system attributes proposed in PSARC/2007/315
6566784 NTFS streams are not copied along with the files.
6576205 cp(1), pack(1) and compress(1) should support file system attributes proposed in PSARC/2007/315
6578875 RFE: kernel interfaces for nbmand need improvement
6578883 RFE: VOP_SHRLOCK needs additional access types
6578885 chmod(1) should support file system attributes proposed in PSARC/2007/315
6578886 RFE: disallow nbmand state to change on remount
6583349 ACL parser needs to support audit/alarm ACE types
6590347 tar(1) should support filesystem attributes proposed in PSARC/2007/315
6597357 *tar* xv@ doesn't show the hidden directory even though it is restored
6597360 *tar* should re-init xattr info if openat() fails during extraction of and extended attribute
6597368 *tar* cannot restore hard linked extended attributes
6597374 *tar* doesn't display "x " when hard linked attributes are restored
6597375 *tar* extended attribute header off by one
6614861 *cpio* incorrectly archives extended system attributes with -@
6614896 *pax* incorrectly archives extended system attributes with -@
6615225 *tar* incorrectly archives extended system attributes with -@
6617183 CIFS Service - PSARC 2006/715

show more ...

6597493 Automount using sec= options is broken in snv_72
6597498 webnfs sec issue in nevada build 72 on all hardware