[LU-19326] Load SSK key from mount point

• Type: Improvement
• Resolution: Fixed
• Priority: Medium
• Fix Version/s: Lustre 2.17.0
• Affects Version/s: Lustre 2.17.0
• Labels: SSK gss security
• Severity: 3
• Epic Link: MTFL: Stretch goals
• Assignee: Chakshu Kansal
• Reporter: Sebastien Buisson

Description

In order to ease SSK deployments, it would make sense to have the client automatically load the SSK key it finds in the mount point. The key would have been copied ahead of time into the client mountpoint directory with the filename .lgss, so when mounting the client, it would look for this .lgss file and load the SSK key it contains. That would be similar to specifying the -o skpath mount option, but in this case it would be done implicitly.

Issue Links

• is related to: LU-19079 gss for nodemap identification
• is related to: LU-19073 lgss_sk should handle ASCII-encoded SSK keys