Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-16630

Improve Kerberos cross-realm trust remapping

    XMLWordPrintable

Details

    • Bug
    • Resolution: Fixed
    • Minor
    • Lustre 2.16.0
    • Lustre 2.16.0
    • 3
    • 9223372036854775807

    Description

      Currently lsvcgssd does have the notion of a "remote user", however its remapping configuration requires listing all users and their UID in a text file (/etc/lustre/idmap.conf)

      It should be possible to call gss_localname() (which in turn would be fed to getpwnam) to resolve usernames. gss_localname goes through the auth_to_local translation rules in krb5.conf and thus can easily be configured by administrators.

      Attachments

        Activity

          People

            sebastien Sebastien Buisson
            sebastien Sebastien Buisson
            Votes:
            0 Vote for this issue
            Watchers:
            4 Start watching this issue

            Dates

              Created:
              Updated:
              Resolved: