Details
-
Improvement
-
Resolution: Unresolved
-
Minor
-
None
-
Lustre 2.16.1
-
3
-
9223372036854775807
Description
When mounting a client with an SSK key for the first time on a client, it would be useful if the "lgss -t client -m KEY" step (or API equivalent) to generate a prime number for the client could be run automatically. If KEY already has a prime number then this step would be skipped.
This avoids an extra configuration step for the administrator when mounting a client, and would also improve security by ensuring that each client has a different prime number. Then, the administrator only needs to distribute the "server" key to clients (or install in a client container/image) and then doesn't need to process the key further before it is used for mounting.