NFSv4-patched ACL lib dependencies

[J. Bruce Fields]

On Mon, Jul 07, 2008 at 03:24:06PM -0700, Paarvai Naai wrote:
> Hi all,
> 
> I'm returning to the issue of NFSv4 in the process of upgrading my
> company's servers.  I noticed on the following page
> 
> http://www.citi.umich.edu/projects/nfsv4/linux/
> 
> it states that "... the patches make fundamental utilities such as cp
> and ls depend on ldap and krb5 libraries (among others) ...."  This is
> basically the same issue that I had a while ago (cf. "Problem with ACL
> lib dependencies" from Nov 21, 2006).
> 
> I have one possible suggestion.  Specifically, it looks like the
> dependencies primarily originate from the use of
> /usr/lib/libnfsidmap.so.  Rather than dynamically linking to
> /usr/lib/libnfsidmap.so, one could use dlopen to dynamically open
> /usr/lib/libnfsidmap.so during run-time and populate function pointers
> to the functions needed by the patched libacl.so.  If
> /usr/lib/libnfsidmap.so is not available, then nfsv4 support can
> simply be bypassed at runtime.  In this way, it is possible to have a
> patched version of libacl (normally found in /lib) that is not by
> default dependent on libraries in /usr/lib.  This type of fix can also
> help facilitate propagating the patches for libacl upstream so they
> are available in common Linux distributions by default.

Yup, that sounds like a good idea (patches welcome...).

Also, I think Olga had some patches to use dlopen() as needed in libacl
or librpcsec_gss and remove the need for some of their dependencies--but
I've forgotten what happened to that effort.

--b.