Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-17518

MDS still trust client-originated support GID on a Kerberos enabled filesystem

    XMLWordPrintable

Details

    • 3
    • 9223372036854775807

    Description

      On a kerberos enabled filesystem, the MDS should not trust the UID/GID/supplementary groups sent by the clients, and instead get the UID from the GSS context, and the GID and supplementary groups from the identity upcall.

      Attachments

        Issue Links

          is duplicated by

          Bug - A problem which impairs or prevents the functions of the product. LU-11612 Potential null pointer dereference in new_init_ucred

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            People

              sebastien Sebastien Buisson
              sebastien Sebastien Buisson
              Votes:
              0 Vote for this issue
              Watchers:
              4 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: