Comment 15 for bug 1772148

Revision history for this message
Andreas Hasenack (ahasenack) wrote :

> In addition, DFS support for target shares which are specified as UNC
> names which begin with host names (rather than IP addresses) requires
> a user space helper (such as cifs.upcall)

So DFS would require /sbin/key.dns_resolver? DFS was the original requirement for adding keyutils as a Recommends back in 2011 via https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504690.

Your list then becomes:
for several scenarios:
- 'cifsacl' option is used or
- kerberos auth is used / spnego is used
- when DFS is used

The extra deps that keyutils pulls in seem minor and already exist on the normal system:
Depends: libc6 (>= 2.15), libkeyutils1 (>= 1.6)

FWIW, I would favor promoting keyutils back to Recommends.