[LU-14151] GSS context initialization fails on RHEL8.2 client Created: 26/Nov/20 Updated: 16/Dec/20 Resolved: 13/Dec/20 |
|
| Status: | Resolved |
| Project: | Lustre |
| Component/s: | None |
| Affects Version/s: | None |
| Fix Version/s: | Lustre 2.14.0 |
| Type: | Bug | Priority: | Minor |
| Reporter: | Sebastien Buisson | Assignee: | Sebastien Buisson |
| Resolution: | Fixed | Votes: | 0 |
| Labels: | gss, patch | ||
| Issue Links: |
|
||||||||
| Severity: | 3 | ||||||||
| Rank (Obsolete): | 9223372036854775807 | ||||||||
| Description |
|
When running Lustre client on RHEL8.2, Kerberos authentication can fail with the following message: LustreError: 323835:0:(gss_crypto.c:68:gss_keyblock_init()) failed to allocate tfm: cbc(aes), mode 0: rc = -2 Problem stems from the fact that in RHEL8.2 (and Ubuntu 18.04 and possibly newer distros, as it depends on the kernel), the cbc(aes) crypto engine's type is now skcipher. In previous distros like RHEL7, type is blkcipher. This type has an impact on the primitive to call from Lustre in order to allocate an associated cipher handle. |
| Comments |
| Comment by Gerrit Updater [ 26/Nov/20 ] |
|
Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: https://review.whamcloud.com/40768 |
| Comment by Gerrit Updater [ 13/Dec/20 ] |
|
Oleg Drokin (green@whamcloud.com) merged in patch https://review.whamcloud.com/40768/ |
| Comment by Peter Jones [ 13/Dec/20 ] |
|
Landed for 2.14 |
| Comment by Gerrit Updater [ 16/Dec/20 ] |
|
Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: https://review.whamcloud.com/40997 |