[LU-16758] Consider Kerberos machine principal for use in Lustre client

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.16.0
• Affects Version/s: Lustre 2.16.0
• Labels: kerberos patch sec
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

Currently Lustre clients rely on the lustre_root/<hostname>@REALM principal to authenticate.
Consider supporting the more standard Kerberos machine principal (i.e. host/<hostname>@REALM) as well to avoid the need for additional keytab entries.
This would bring Lustre in line with other services such as OpenSSH and NFS.

Issue Links

• is duplicated by: LU-17176 Try to use Kerberos machine principal on Lustre servers