Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-17518

MDS still trust client-originated support GID on a Kerberos enabled filesystem

Details

    • 3
    • 9223372036854775807

    Description

      On a kerberos enabled filesystem, the MDS should not trust the UID/GID/supplementary groups sent by the clients, and instead get the UID from the GSS context, and the GID and supplementary groups from the identity upcall.

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. LU-11612 Potential null pointer dereference in new_init_ucred

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            [LU-17518] MDS still trust client-originated support GID on a Kerberos enabled filesystem
            pjones Peter Jones added a comment -

            Merged for 2.16

            pjones Peter Jones added a comment - Merged for 2.16
            gerrit Gerrit Updater added a comment -

            "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/53987/
            Subject: LU-17518 gss: do not trust supp groups from client with krb
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: b09f56c208c6c34375d098f66075688f329b7c76

            gerrit Gerrit Updater added a comment - "Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/53987/ Subject: LU-17518 gss: do not trust supp groups from client with krb Project: fs/lustre-release Branch: master Current Patch Set: Commit: b09f56c208c6c34375d098f66075688f329b7c76
            gerrit Gerrit Updater added a comment -

            "Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/53987
            Subject: LU-17518 gss: do not trust supp groups from client with krb
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: 04b9ba203ef36f71ed8407cccdc8ba9a70617e49

            gerrit Gerrit Updater added a comment - "Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/53987 Subject: LU-17518 gss: do not trust supp groups from client with krb Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 04b9ba203ef36f71ed8407cccdc8ba9a70617e49

            People

              sebastien Sebastien Buisson
              sebastien Sebastien Buisson
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: