[LU-10531] GSS, Shared Key and Kerberos support broken in master and lustre 2.10

• Type: Bug
• Resolution: Fixed
• Priority: Critical
• Fix Version/s: Lustre 2.11.0, Lustre 2.10.4
• Affects Version/s: Lustre 2.11.0, Lustre 2.10.2
• Labels: gss kerberos patch
• Severity: 3
• Assignee: James A Simmons
• Reporter: Sebastien Buisson (Inactive)

Description

GSS, Shared Key and Kerberos support is currently broken in master branch. It is indeed impossible to set any flavor for sptlrpc, whereas it is gssnull or ski or krb5

{n,a,i,p}

.

For instance, when doing 'lctl conf_param lustre.srpc.flavor.default=krb5n' or 'lctl set_param -P lustre.srpc.flavor.default=krb5n', the command returns no error, but the value is never applied.

The commit introducing this regression is the following, and aims at making 'lctl set_param -P' functional:
https://review.whamcloud.com/28590

As mentioned in this patch's comment, "currently virtual attributes failover.nid, sptlrpc, and quota
are not fully supported. They will be addressed in later patches".

As I understand 'lctl set_param -P' needs more work to make it work for sptlrpc, the patch should not break 'lctl conf_param' functionality for sptlrpc.

Issue Links

• is related to: LU-7854 sanity-gss test_1 fails with 'chmod /lustre/scratch failed'
• is related to: LU-9795 SSK test failures in many suites when SHARED_KEY is enabled