[LU-7604] Issues with Kerberos when flushing context or destroying tickets

• Type: Bug
• Resolution: Fixed
• Priority: Major
• Fix Version/s: Lustre 2.8.0
• Affects Version/s: Lustre 2.8.0
• Labels: patch
• Severity: 3
• Assignee: James Nunez (Inactive)
• Reporter: Sebastien Buisson (Inactive)

Description

When running sanity-krb5.sh test script, several errors are due to a problem with handling of context flush or ticket destroy by Lustre code.

It appears that the behavior of request_key kernel function has changed from RHEL6/CentOS6 to RHEL7/CentOS7. With recent versions, a key is no longer returned if it is not usable (like revoked). This new behavior does not please Lustre expectations, and lead to the impossibility to access the Lustre file system.

Of course Lustre code has to be changed to comply with fixed request_key kernel function.
I will submit a patch to address this problem.

Sebastien.

Comments

[James Nunez (Inactive)]

This patch has landed for Lustre 2.8.0

[Gerrit Updater]

Oleg Drokin ([e-mail]) merged in patch http://review.whamcloud.com/17721/
Subject: LU-7604 gss: handle revoked keys properly
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: fa4646291c7059597bd5d682f0c6c89b65ecf97e

[James Nunez (Inactive)]

I've verified that this patch allows sanity-krb5 to run.

[Peter Jones]

Thanks Sebastien. We'll check this patch out and see about including it in 2.8.

James

Could you please try out this patch to see if it works in your own testing?

Thanks

Peter

[Sebastien Buisson (Inactive)]

Hi,

Patch has been submitted here:
http://review.whamcloud.com/17721

Thanks,
Sebastien.

[Gerrit Updater]

Sebastien Buisson ([e-mail]) uploaded a new patch: http://review.whamcloud.com/17721
Subject: LU-7604 gss: handle revoked keys properly
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: e2851b6987f6cb67ccd4f14e64c00541b182ee9c