[LU-2384] Support for MIT-kerberos library version >= 1.8.X is broken

• Type: Bug
• Resolution: Fixed
• Priority: Major
• Fix Version/s: Lustre 2.4.0
• Affects Version/s: Lustre 2.3.0
• Labels: kerberos patch
• Environment: Linux distributions supporting MIT-kerberos library >= 1.8.X
• Severity: 3

Epic

interoperability

• Assignee: Keith Mannthey (Inactive)
• Reporter: Thomas Stibor

Description

Since version 1.8.X of the MIT-kerberos library the function
signature for deriving cryptographic keys:

krb5_derive_key(const struct krb5_enc_provider *enc,
const krb5_keyblock *inkey, krb5_keyblock *outkey,
const krb5_data *in_constant)

is changed in:

krb5int_derive_key(const struct krb5_enc_provider *enc,
krb5_key inkey, krb5_key *outkey,
const krb5_data *in_constant)

The kerberos support for lustre thus is not working anymore with current
linux distributions supporting MIT-kerberos library >= 1.8.X.