Details
-
Task
-
Resolution: Fixed
-
Minor
-
None
-
None
-
3
-
9223372036854775807
Description
According to patch http://review.whamcloud.com/19789 ("LU-6971 cleanup: not support remote client anymore") the support for remote authenticated clients was deprecated in Lustre v2_8_54_0-73-g9d06de3973.
In patch https://review.whamcloud.com/50259 ("LU-16630 sec: improve Kerberos cross-realm trust remapping") it visibly deprecated the use of /etc/lustre/idmap.conf in v2_15_55-39-g3214d4d860, but it may be that the cross-realm Kerberos support was already deprecated much earlier than this?
The "l_idmap" command has existed forever, and (apparently) can be used to lookup entries in idmap.conf. However, it hasn't been modified in ages and is not documented anywhere (neither man page or LOM), and I'm not aware of anyone using this functionality.
Is l_idmap() useful, or should it be removed?
Are the "mapping" functions that it calls in lustre/utils/gss/lsupport.c useful for anything else? They are called from lustre/utils/gss/svcgssd_proc.c, so might be useful?