[LU-3289] IU Shared Secret Key authentication and encryption

• Type: New Feature
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.9.0
• Labels: SSK gssapi patch
• Assignee: Jeremy Filizetti
• Reporter: Andreas Dilger

Description

Tracking bug for Indiana University's Shared Secret Key authentication and encryption security feature.

Issue Links

• is blocked by: LU-5951 sanity test_39k: mtime is lost on close
• is blocked by: LU-7508 LBUG sending reply to GSS enabled client
• is related to: LU-3290 disallow ptlrpc RPCs with old client XIDs
• is related to: LU-4625 errors seen during lustre rpm install
• is related to: LU-7661 MGS_SET_INFO handler is too permissive
• is related to: LU-7182 LBUG during key reestablishment with GSS clients
• is related to: LU-7184 (lod_dev.c:1493:lod_device_free()) ASSERTION( atomic_read(&lu->ld_ref) == 0 ) failed: lu is ffff88010cf8a000
• is related to: LU-7185 restore flags on ptlrpc_connect_import failure to prevent LBUG
• is related to: LU-7183 lctl set_param -P does not work for sptlrpc flavor
• is related to: LUDOC-197 Complete Lustre Manual updates for IU Shared Secret Key authentication and encryption
• is related to: LU-3778 GSS doesn't know about proxy subsystems
• is related to: LU-8229 SSK: allow multiple keys on a single nodemap
• is related to: LU-8602 Support GSS crypto code with linux 4.6 kernels
• is related to: LU-8590 Fix issues with SK privacy and integrity mode
• is related to: LU-6356 Kerberos revival
• is related to: LU-4371 Mechanism-agnostic GSSAPI testing
• is related to: LU-4764 Factor common code out of GSS-related test scripts
• is related to: LU-8275 ssk: add flag to test suite to enable ssk for tests