> In addition, DFS support for target shares which are specified as UNC > names which begin with host names (rather than IP addresses) requires > a user space helper (such as cifs.upcall)
So DFS would require /sbin/key.dns_resolver? DFS was the original requirement for adding keyutils as a Recommends back in 2011 via https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=504690.
Your list then becomes: for several scenarios: - 'cifsacl' option is used or - kerberos auth is used / spnego is used - when DFS is used
The extra deps that keyutils pulls in seem minor and already exist on the normal system: Depends: libc6 (>= 2.15), libkeyutils1 (>= 1.6)
FWIW, I would favor promoting keyutils back to Recommends.
> In addition, DFS support for target shares which are specified as UNC
> names which begin with host names (rather than IP addresses) requires
> a user space helper (such as cifs.upcall)
So DFS would require /sbin/key. dns_resolver? DFS was the original requirement for adding keyutils as a Recommends back in 2011 via https:/ /bugs.debian. org/cgi- bin/bugreport. cgi?bug= 504690.
Your list then becomes:
for several scenarios:
- 'cifsacl' option is used or
- kerberos auth is used / spnego is used
- when DFS is used
The extra deps that keyutils pulls in seem minor and already exist on the normal system:
Depends: libc6 (>= 2.15), libkeyutils1 (>= 1.6)
FWIW, I would favor promoting keyutils back to Recommends.