[LU-12401] Various issues with checksum calculation for Kerberos and SSK

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.13.0, Lustre 2.12.3
• Affects Version/s: Lustre 2.13.0
• Labels: gss
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

When computing checksum for Kerberos, krb5 wire token header is appended to the plain text. We need to make sure the actual header is appended in gss_digest_hash().

In gss_crypt_generic(), it is better to protect against an undefined behavior by
switching from memcpy to memmove.

Comments

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch https://review.whamcloud.com/35536/
Subject: LU-12401 gss: fix checksum for Kerberos and SSK
Project: fs/lustre-release
Branch: b2_12
Current Patch Set:
Commit: d29eea632bb8a99b83442ba7946707e8baf2dcef

[Sebastien Buisson]

Still trying to have patch https://review.whamcloud.com/35536 landed for next 2.12 release.

[Peter Jones]

Landed for 2.13

[Gerrit Updater]

Sebastien Buisson ([e-mail]) uploaded a new patch: https://review.whamcloud.com/35536
Subject: LU-12401 gss: fix checksum for Kerberos and SSK
Project: fs/lustre-release
Branch: b2_12
Current Patch Set: 1
Commit: 61d18ff20a8ba3e2377aafe60156bdf021902ba4

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch https://review.whamcloud.com/35099/
Subject: LU-12401 gss: fix checksum for Kerberos and SSK
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 218fc688c11f081881b2cc1c1632ceaf9ec77a77

[Sebastien Buisson]

Also, when computing checksum for SSK, we need to make sure the actual token is used to store the checksum.

[Gerrit Updater]

Sebastien Buisson ([e-mail]) uploaded a new patch: https://review.whamcloud.com/35099
Subject: LU-12401 gss: fix checksum for Kerberos
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 5d539c480e352db07adf12f5b53878a67b8e5fd2