[LU-17497] Prevent setting incorrect values for identity and rsi upcall

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.16.0
• Affects Version/s: Lustre 2.16.0
• Labels: patch sec
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

Identity upcall can be set via lctl set_param mdt.*.identity_upcall=xxx, and rsi upcall can be set via lctl set_param sptlrpc.gss.rsi_upcall=xxx.

Possible values are a valid path to an executable, and also NONE to disable identity upcall. In order to prevent Lustre issues due to the upcall incorrectly set, we should check for input value, and return an error if it is not correct (along with a kind message giving accepted values).

Comments

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/54782/
Subject: LU-17497 tests: skip sanity-sec/69 for old MDS
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 7bc5aeea4e024818696bd1e9c01263daec257fb4

[Gerrit Updater]

"Andreas Dilger <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/54782
Subject: LU-17497 tests: skip sanity-sec/69 for old MDS
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 57b39fb5fecc895dc220835789d6011479bdd4db

[Peter Jones]

Merged for 2.16

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/53878/
Subject: LU-17497 obdclass: check upcall incorrect values
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 2153e86541884ef7a5c1697a5d00daf6fa6461a4

[Gerrit Updater]

"Sebastien Buisson <[e-mail]>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/53878
Subject: LU-17497 obdclass: check upcall incorrect values
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 60cb12152e84f8a33a78a3a977c54eb3c5933af3