[LU-11750] lsvcgssd crash with latest krb5-libs Created: 10/Dec/18  Updated: 19/Mar/19  Resolved: 04/Jan/19

Status: Resolved
Project: Lustre
Component/s: None
Affects Version/s: Lustre 2.12.0, Lustre 2.10.5
Fix Version/s: Lustre 2.13.0, Lustre 2.12.1

Type: Bug Priority: Critical
Reporter: Sebastien Buisson Assignee: Sebastien Buisson
Resolution: Fixed Votes: 0
Labels: krb5, patch

Severity: 3
Rank (Obsolete): 9223372036854775807

 Description   

When preparing RFP for customer DDBJ (DNA Bank of Japan), we noticed Lustre does not support latest krb5 version, as provided in CentOS 7.
Indeed, from krb5-libs version 1.15, lsvcgssd daemon crashes when invoked for Kerberos credentials handling, thus preventing use of any Kerberos flavor with Lustre.



 Comments   
Comment by Sebastien Buisson [ 10/Dec/18 ]

The issue is due to the following patch in krb5, adding support for aes-sha2:
https://github.com/krb5/krb5/commit/135a9ac3c58b444998361a3b13f5decfdece2105

This patch modified the number of parameters taken by function krb5int_derive_key().

I will propose a patch in Lustre to be able to support krb5int_derive_key() with 5 or 6 parameters.

Comment by Gerrit Updater [ 10/Dec/18 ]

Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: https://review.whamcloud.com/33817
Subject: LU-11750 krb5: krb5int_derive_key has 'hash' extra parameter
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 9e8f4c75a40a23c14420341fca4e9ba48eaf4004

Comment by Gerrit Updater [ 10/Dec/18 ]

Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: https://review.whamcloud.com/33818
Subject: LU-11750 krb5: krb5int_derive_key has 'hash' extra parameter
Project: fs/lustre-release
Branch: b2_10
Current Patch Set: 1
Commit: 15ea8b45726de55074e8cf89bd7c6b1b6a9ef002

Comment by Gerrit Updater [ 04/Jan/19 ]

Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/33817/
Subject: LU-11750 krb5: krb5int_derive_key has 'hash' extra parameter
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 4d1d6ed7849b0532e44f2fd742d4e07b649d6f66

Comment by Peter Jones [ 04/Jan/19 ]

Sebastien

Do we want this for b2_12 also?

Peter

Comment by Sebastien Buisson [ 07/Jan/19 ]

Yes, I will push a patch for 2.12 now that it has been rolled out.

Comment by Gerrit Updater [ 07/Jan/19 ]

Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: https://review.whamcloud.com/33961
Subject: LU-11750 krb5: krb5int_derive_key has 'hash' extra parameter
Project: fs/lustre-release
Branch: b2_12
Current Patch Set: 1
Commit: 1cde0d1bad05c1d08774d9cdcc1e07b8521ba796

Comment by Gerrit Updater [ 19/Mar/19 ]

Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/33961/
Subject: LU-11750 krb5: krb5int_derive_key has 'hash' extra parameter
Project: fs/lustre-release
Branch: b2_12
Current Patch Set:
Commit: 79efb69ef637538df360ef032981a56d34ed6a89

Generated at Sat Feb 10 02:46:36 UTC 2024 using Jira 9.4.14#940014-sha1:734e6822bbf0d45eff9af51f82432957f73aa32c.