[LU-17015] Support large Kerberos tokens Created: 03/Aug/23  Updated: 17/Jan/24  Resolved: 13/Dec/23

Status: Resolved
Project: Lustre
Component/s: None
Affects Version/s: Lustre 2.16.0
Fix Version/s: Lustre 2.16.0

Type: Bug Priority: Minor
Reporter: Sebastien Buisson Assignee: Sebastien Buisson
Resolution: Fixed Votes: 0
Labels: kerberos, sec

Issue Links:
Related
is related to LU-3855 GSS code cannot handle large Kerberos... Closed
Severity: 3
Rank (Obsolete): 9223372036854775807

 Description   

Depending on the Kerberos configuration on a system, Kerberos tokens can be quite large (e.g. 2,5k). The Lustre code must be able to handle this.



 Comments   
Comment by Gerrit Updater [ 03/Aug/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/51866
Subject: LU-17015 sec: support large Kerberos tokens
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: a67c7d6da394837ed36978e3d3aff54f60dcdc5e

Comment by Gerrit Updater [ 15/Aug/23 ]

"Aurelien Degremont <adegremont@nvidia.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/51946
Subject: LU-17015 gss: support large kerberos token on client side
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 6a8d6d5c1cf43950b400db8687b0116fc263fa15

Comment by Aurelien Degremont [ 15/Aug/23 ]

A smaller patch to land the client side fix quickly. The first patch will be rebase onto this one and will handle the server side fix.

Comment by Gerrit Updater [ 28/Aug/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52128
Subject: LU-17015 obdclass: make upcall cache hashtable size dynamic
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 2d8cde1c12d2b8e926857f05db97a907897f2943

Comment by Gerrit Updater [ 31/Aug/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/51946/
Subject: LU-17015 gss: support large kerberos token on client
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 9758129177f11515d1f11cffc1e45f659ffd28a2

Comment by Gerrit Updater [ 01/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52224
Subject: LU-17015 gss: support large kerberos token on server
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 8d45e75cc4481b4f9fb64e20111674412988c715

Comment by Gerrit Updater [ 05/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52271
Subject: LU-17015 obdclass: set cache entry/acquire expiry at init
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 2d24c820f32699d66b56024ae99a7b27944f6130

Comment by Gerrit Updater [ 07/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52305
Subject: LU-17015 gss: support large kerberos token for rpc sec ctxt
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: f0a6ba4e59dda3d090ba4203b5b5f8f147f2bca9

Comment by Gerrit Updater [ 12/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52344
Subject: LU-17015 dbg: debug sanity-sec test_31
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 00953e35abfefb5b777ee835a215e7bff706a87f

Comment by Gerrit Updater [ 12/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52347
Subject: LU-17015 dbg: debug sanity-sec test_31 - 2
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: e8ce844c9ea1d79ebc419b56f88814064470c5e2

Comment by Gerrit Updater [ 12/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52348
Subject: LU-17015 dbg: debug sanity-sec test_31 - 3
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: c6a8945aa6dc050dc632b5fba4f8c32eeff27984

Comment by Gerrit Updater [ 12/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52349
Subject: LU-17015 dbg: debug sanity-sec test_31 - 4
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 5ab436ac9ba257d827757366de9e3c94544b7a57

Comment by Gerrit Updater [ 13/Sep/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/52128/
Subject: LU-17015 obdclass: make upcall cache hashtable size dynamic
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 79f823bd40ee97a5846d828efce1080dc04a6057

Comment by Gerrit Updater [ 14/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52376
Subject: LU-17015 gss: remove legacy sunrpc-cache based gss caches
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 243c4e6cfa3ae2db568f02e4a18e7f71373ead92

Comment by Gerrit Updater [ 14/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52377
Subject: LU-17015 dbg: debug sanity-krb5 test_8
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 1d0620a5814e4a8ebde9d7776ff9133e219fcc55

Comment by Gerrit Updater [ 15/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52389
Subject: LU-17015 obdclass: new primitives for upcall cache
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: aebd8fe7df20625fb96d2dd5f5627fcd68cdaec6

Comment by Gerrit Updater [ 21/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52450
Subject: LU-17015 dbg: debug tests
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 13151379e0d216ab267b14cb269dfe1452fefef4

Comment by Gerrit Updater [ 22/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52475
Subject: LU-17015 gss: bump token buffer size to 16KiB
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: e9ae6967d9ea0abd8fedb29df8e4c8d96baa4fca

Comment by Gerrit Updater [ 23/Sep/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/52271/
Subject: LU-17015 obdclass: set cache entry/acquire expiry at init
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 407167f4d18522fb47821030e3b171cbdb7158a0

Comment by Gerrit Updater [ 23/Sep/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/52389/
Subject: LU-17015 obdclass: new primitives for upcall cache
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 2ddb1d33245c23c4cafe64fb917323bdf567c81f

Comment by Gerrit Updater [ 29/Sep/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52555
Subject: LU-17015 dbg: debug sanity-sec test_23a - 1
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: c427bb5fa2ac2e73b8f7c3aceffb2944800cf285

Comment by Gerrit Updater [ 11/Oct/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52629
Subject: LU-17015 sec: fix PTLRPC_CTX_STATUS_MASK
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 28c459256c327a7ae80b9fe28b350427a3424089

Comment by Gerrit Updater [ 13/Oct/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/52689
Subject: LU-17015 gss: add more debug messages
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 60c79421164f92ff8c54d9489aa2cf9f7faf3795

Comment by Gerrit Updater [ 16/Oct/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/52475/
Subject: LU-17015 gss: bump token buffer size to 16KiB
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 8d82cf1413752c8ab5b9a5eb51611fb2bc1e64d7

Comment by Gerrit Updater [ 25/Oct/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/52224/
Subject: LU-17015 gss: support large kerberos token for rpc sec init
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 8d828762d18ffaa2945bde56039127d0e75aceb3

Comment by Gerrit Updater [ 18/Nov/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/52305/
Subject: LU-17015 gss: support large kerberos token for rpc sec ctxt
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 473a41fec6fb600c9b6e26010d88772f5252d1e1

Comment by Gerrit Updater [ 18/Nov/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/52689/
Subject: LU-17015 gss: avoid request replay
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: d0194a4b5f6efa26d5473c2793b525f5fdb77e67

Comment by Gerrit Updater [ 13/Dec/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/52376/
Subject: LU-17015 gss: remove legacy sunrpc-cache based gss caches
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 8665ba238412f407963724413e137b89d5cd384f

Comment by Gerrit Updater [ 13/Dec/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/52629/
Subject: LU-17015 sec: fix PTLRPC_CTX_STATUS_MASK
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: c744221a1fd55df33ca2b0e3e1b1ffd7ef3a986d

Comment by Peter Jones [ 13/Dec/23 ]

All work tracked under this ticket merged for 2.16

Generated at Sat Feb 10 03:31:54 UTC 2024 using Jira 9.4.14#940014-sha1:734e6822bbf0d45eff9af51f82432957f73aa32c.