[LU-16249] Kerberos works with krb5i but not with krb5p

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.16.0, Lustre 2.15.2
• Affects Version/s: Lustre 2.16.0, Lustre 2.15.1
• Labels: kerberos sec
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

A system has been configured with Kerberos and is able to mount and access the filesystem from authenticated clients with the kerberos flavor set to krb5i. If the flavor type is changed to krb5p then we get messages like:

lustre-test00-messages:Oct 11 08:58:34 lustre-test00 kernel: LustreError: 5215:0:(gss_krb5_mech.c:1518:gss_unwrap_bulk_kerberos()) checksum mismatch
lustre-test00-messages:Oct 11 08:58:34 lustre-test00 kernel: LustreError: 5215:0:(gss_bulk.c:287:gss_cli_ctx_unwrap_bulk()) failed to decrypt bulk read: 60000