[LU-14151] GSS context initialization fails on RHEL8.2 client

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.14.0
• Labels: gss patch
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

When running Lustre client on RHEL8.2, Kerberos authentication can fail with the following message:

LustreError: 323835:0:(gss_crypto.c:68:gss_keyblock_init()) failed to allocate tfm: cbc(aes), mode 0: rc = -2

Problem stems from the fact that in RHEL8.2 (and Ubuntu 18.04 and possibly newer distros, as it depends on the kernel), the cbc(aes) crypto engine's type is now skcipher. In previous distros like RHEL7, type is blkcipher. This type has an impact on the primitive to call from Lustre in order to allocate an associated cipher handle.

Issue Links

• is related to: LU-14095 Multiple tests crash with “ASSERTION( rsi->h.cache_list.next == ((void *)0) ) failed “

Comments

[Gerrit Updater]

Sebastien Buisson ([e-mail]) uploaded a new patch: https://review.whamcloud.com/40997
Subject: LU-14151 gss: use skcipher when sync_skcipher not available
Project: fs/lustre-release
Branch: b2_12
Current Patch Set: 1
Commit: 23d6fb2a7bb394b3981b540cf376007851cfcd36

[Peter Jones]

Landed for 2.14

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch https://review.whamcloud.com/40768/
Subject: LU-14151 gss: use skcipher when sync_skcipher not available
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: b6eb0c84a3e8ada2dff1d32a3b8bcf80e6ebd246

[Gerrit Updater]

Sebastien Buisson ([e-mail]) uploaded a new patch: https://review.whamcloud.com/40768
Subject: LU-14151 gss: use skcipher when sync_skcipher not available
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 614d01296f043bbef9c5782e9ef37b01e71ca1b7