[LU-17023] lsvcgssd can use a realm different from default realm Created: 10/Aug/23  Updated: 06/Sep/23  Resolved: 06/Sep/23

Status: Resolved
Project: Lustre
Component/s: None
Affects Version/s: Lustre 2.16.0
Fix Version/s: Lustre 2.16.0

Type: Bug Priority: Minor
Reporter: Sebastien Buisson Assignee: Sebastien Buisson
Resolution: Fixed Votes: 0
Labels: kerberos, patch, sec

Issue Links:
Related
Severity: 3
Rank (Obsolete): 9223372036854775807

 Description   

lsvcgssd uses the default_realm and try to match principals only exactly matching this realm.

We would like to be able to specify a different realm than the default one, ie:
lsvcgss -R <DOMAIN.COM> -k -m -o -v



 Comments   
Comment by Gerrit Updater [ 10/Aug/23 ]

"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: https://review.whamcloud.com/c/fs/lustre-release/+/51914
Subject: LU-17023 krb: lsvcgssd uses a realm different from default
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 1e2f2a5561ee14a8baef74e18a48c0179aaef3d0

Comment by Gerrit Updater [ 06/Sep/23 ]

"Oleg Drokin <green@whamcloud.com>" merged in patch https://review.whamcloud.com/c/fs/lustre-release/+/51914/
Subject: LU-17023 krb: use a Kerberos realm different from default
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 7d8a15fbf86811e5ba71b1b35b2d829e231f08de

Comment by Peter Jones [ 06/Sep/23 ]

Landed for 2.16

Generated at Sat Feb 10 03:31:58 UTC 2024 using Jira 9.4.14#940014-sha1:734e6822bbf0d45eff9af51f82432957f73aa32c.