Uploaded image for project: 'Lustre'
  1. Lustre
  2. LU-3289

IU Shared Secret Key authentication and encryption

Details

    • New Feature
    • Resolution: Fixed
    • Minor
    • Lustre 2.9.0
    • None
    • 8147

    Description

      Tracking bug for Indiana University's Shared Secret Key authentication and encryption security feature.

      Attachments

        Issue Links

          is blocked by

          Bug - A problem which impairs or prevents the functions of the product. LU-5951 sanity test_39k: mtime is lost on close

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-7508 LBUG sending reply to GSS enabled client

          • Major - Major loss of function.
          • Resolved
          is related to

          Bug - A problem which impairs or prevents the functions of the product. LU-3290 disallow ptlrpc RPCs with old client XIDs

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Open

          Bug - A problem which impairs or prevents the functions of the product. LU-4625 errors seen during lustre rpm install

          • Blocker - Blocks development and/or testing work, production could not run.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-7661 MGS_SET_INFO handler is too permissive

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-7182 LBUG during key reestablishment with GSS clients

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-7184 (lod_dev.c:1493:lod_device_free()) ASSERTION( atomic_read(&lu->ld_ref) == 0 ) failed: lu is ffff88010cf8a000

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-7185 restore flags on ptlrpc_connect_import failure to prevent LBUG

          • Major - Major loss of function.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-7183 lctl set_param -P does not work for sptlrpc flavor

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Closed

          Story - Created by Jira Software - do not edit or delete. Issue type for a user story. LUDOC-197 Complete Lustre Manual updates for IU Shared Secret Key authentication and encryption

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Technical task - A technical task. LU-3778 GSS doesn't know about proxy subsystems

          • Critical - Crashes, loss of data, severe memory leak.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. LU-8229 SSK: allow multiple keys on a single nodemap

          • Major - Major loss of function.
          • Open

          Improvement - An improvement or enhancement to an existing feature or task. LU-8602 Support GSS crypto code with linux 4.6 kernels

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved
          is related to

          Bug - A problem which impairs or prevents the functions of the product. LU-8590 Fix issues with SK privacy and integrity mode

          • Blocker - Blocks development and/or testing work, production could not run.
          • Resolved

          Bug - A problem which impairs or prevents the functions of the product. LU-6356 Kerberos revival

          • Major - Major loss of function.
          • Resolved

          New Feature - A new feature of the product, which has yet to be developed. LU-4371 Mechanism-agnostic GSSAPI testing

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. LU-4764 Factor common code out of GSS-related test scripts

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Improvement - An improvement or enhancement to an existing feature or task. LU-8275 ssk: add flag to test suite to enable ssk for tests

          • Minor - Minor loss of function, or other problem where easy workaround is present.
          • Resolved

          Activity

            [LU-3289] IU Shared Secret Key authentication and encryption
            gerrit Gerrit Updater added a comment -

            Jeremy Filizetti (jeremy.filizetti@gmail.com) uploaded a new patch: http://review.whamcloud.com/23322
            Subject: LU-3289 gss: Move DH parameter generation out of upcall
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: 9fbbcc2448661ed944d1a06ab5184bcdbca5b964

            gerrit Gerrit Updater added a comment - Jeremy Filizetti (jeremy.filizetti@gmail.com) uploaded a new patch: http://review.whamcloud.com/23322 Subject: LU-3289 gss: Move DH parameter generation out of upcall Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 9fbbcc2448661ed944d1a06ab5184bcdbca5b964
            gerrit Gerrit Updater added a comment -

            Oleg Drokin (oleg.drokin@intel.com) merged in patch http://review.whamcloud.com/23089/
            Subject: LU-3289 ssk: fix SK_IV_REV_START on 32-bit systems
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: bdb254df1060f1ad4b21d53396b5b4014c926758

            gerrit Gerrit Updater added a comment - Oleg Drokin (oleg.drokin@intel.com) merged in patch http://review.whamcloud.com/23089/ Subject: LU-3289 ssk: fix SK_IV_REV_START on 32-bit systems Project: fs/lustre-release Branch: master Current Patch Set: Commit: bdb254df1060f1ad4b21d53396b5b4014c926758
            gerrit Gerrit Updater added a comment -

            Oleg Drokin (oleg.drokin@intel.com) merged in patch http://review.whamcloud.com/21922/
            Subject: LU-3289 gss: Fix issues with SK privacy and integrity mode
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: 462037d5d302f408b840d2543de89b22f8eb7b73

            gerrit Gerrit Updater added a comment - Oleg Drokin (oleg.drokin@intel.com) merged in patch http://review.whamcloud.com/21922/ Subject: LU-3289 gss: Fix issues with SK privacy and integrity mode Project: fs/lustre-release Branch: master Current Patch Set: Commit: 462037d5d302f408b840d2543de89b22f8eb7b73
            gerrit Gerrit Updater added a comment -

            Andreas Dilger (andreas.dilger@intel.com) uploaded a new patch: http://review.whamcloud.com/23089
            Subject: LU-3289 ssk: fix SK_IV_REV_START on 32-bit systems
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: 118a53cf2f0d6aa2fc9afbbe65d2361f8e371676

            gerrit Gerrit Updater added a comment - Andreas Dilger (andreas.dilger@intel.com) uploaded a new patch: http://review.whamcloud.com/23089 Subject: LU-3289 ssk: fix SK_IV_REV_START on 32-bit systems Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 118a53cf2f0d6aa2fc9afbbe65d2361f8e371676
            gerrit Gerrit Updater added a comment -

            Oleg Drokin (oleg.drokin@intel.com) merged in patch http://review.whamcloud.com/22626/
            Subject: LU-3289 gss: Change the handling of keys for SK
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: 7b596ad0b36ec5f0281be368b67b7e624457de18

            gerrit Gerrit Updater added a comment - Oleg Drokin (oleg.drokin@intel.com) merged in patch http://review.whamcloud.com/22626/ Subject: LU-3289 gss: Change the handling of keys for SK Project: fs/lustre-release Branch: master Current Patch Set: Commit: 7b596ad0b36ec5f0281be368b67b7e624457de18
            gerrit Gerrit Updater added a comment -

            Oleg Drokin (oleg.drokin@intel.com) merged in patch http://review.whamcloud.com/22806/
            Subject: LU-3289 gss: don't build SSK if libssl-1.0+ not available
            Project: fs/lustre-release
            Branch: master
            Current Patch Set:
            Commit: bbee5d1ae941a208d7a07d0348e835ab58ca90ce

            gerrit Gerrit Updater added a comment - Oleg Drokin (oleg.drokin@intel.com) merged in patch http://review.whamcloud.com/22806/ Subject: LU-3289 gss: don't build SSK if libssl-1.0+ not available Project: fs/lustre-release Branch: master Current Patch Set: Commit: bbee5d1ae941a208d7a07d0348e835ab58ca90ce
            gerrit Gerrit Updater added a comment -

            Andreas Dilger (andreas.dilger@intel.com) uploaded a new patch: http://review.whamcloud.com/22806
            Subject: LU-3289 gss: don't build SSK if libssl-1.0+ not available
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: 3d750b41a6892e5b19f3bab4de75ca4dd0b6c033

            gerrit Gerrit Updater added a comment - Andreas Dilger (andreas.dilger@intel.com) uploaded a new patch: http://review.whamcloud.com/22806 Subject: LU-3289 gss: don't build SSK if libssl-1.0+ not available Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 3d750b41a6892e5b19f3bab4de75ca4dd0b6c033
            gerrit Gerrit Updater added a comment -

            Jeremy Filizetti (jeremy.filizetti@gmail.com) uploaded a new patch: http://review.whamcloud.com/22801
            Subject: LU-3289 gss: Add autoconf check to prevent GSS with SLES11
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: 2807d42f2dcead6092d4ffc58c1aaf9631e41253

            gerrit Gerrit Updater added a comment - Jeremy Filizetti (jeremy.filizetti@gmail.com) uploaded a new patch: http://review.whamcloud.com/22801 Subject: LU-3289 gss: Add autoconf check to prevent GSS with SLES11 Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 2807d42f2dcead6092d4ffc58c1aaf9631e41253
            gerrit Gerrit Updater added a comment -

            Jeremy Filizetti (jeremy.filizetti@gmail.com) uploaded a new patch: http://review.whamcloud.com/22626
            Subject: LU-3289 gss: Change the handling of keys for SK
            Project: fs/lustre-release
            Branch: master
            Current Patch Set: 1
            Commit: 8ae0caabad096181b21ba7d7013662f928327738

            gerrit Gerrit Updater added a comment - Jeremy Filizetti (jeremy.filizetti@gmail.com) uploaded a new patch: http://review.whamcloud.com/22626 Subject: LU-3289 gss: Change the handling of keys for SK Project: fs/lustre-release Branch: master Current Patch Set: 1 Commit: 8ae0caabad096181b21ba7d7013662f928327738
            simmonsja James A Simmons added a comment -

            I created ticket LU-8602 for the crypto API changes in 4.6+ kernels.

            simmonsja James A Simmons added a comment - I created ticket LU-8602 for the crypto API changes in 4.6+ kernels.

            People

              jfilizetti Jeremy Filizetti
              adilger Andreas Dilger
              Votes:
              0 Vote for this issue
              Watchers:
              19 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: