[LUDOC-322] reinstate Kerberos chapter in the manual Created: 12/Jan/16  Updated: 13/May/22  Resolved: 13/May/22

Status: Resolved
Project: Lustre Documentation
Component/s: None
Affects Version/s: Lustre 2.13.0 Manual, Lustre 2.14.0 Manual
Fix Version/s: Lustre 2.14.0 Manual

Type: Improvement Priority: Minor
Reporter: Andreas Dilger Assignee: Sebastien Buisson
Resolution: Fixed Votes: 0
Labels: 2.8.0, 2.9

Rank (Obsolete): 9223372036854775807

 Description   

There was a chapter describing Kerberos configuration in the original Lustre user manual (https://docs.oracle.com/cd/E19527-01/821-2076-10/821-2076-10.pdf#G18.5529) that was deleted from the user manual because this feature was never supported. Now that work has been done to resurrect the Kerberos functionality this chapter should also be restored to the manual.

Unfortunately, the content of this chapter is somewhat out of date and would need to be updated before it is usable.



 Comments   
Comment by Andreas Dilger [ 09/Nov/16 ]

The Kerberos section of the Lustre 1.8 manual is available on the old Lustre wiki in HTML format. Not sure if that can be converted to XML easily? https://wiki.lustre.org/images/3/3c/821-0035-12.pdf#G18.5529

It should probably remove any references to supporting DES and 3DES encryption, or explicitly state that these encryption algorithms are insecure today. Similarly, it should replace example uses of "CLUSTERFS.COM" with "LUSTRE.ORG" or similar.

Comment by Andreas Dilger [ 07/May/19 ]

Sebastien, would you be able to copy and update the old Kerberos chapter back into the manual.

Comment by Andreas Dilger [ 02/Feb/21 ]

Sebastien, is there any chance you could look into this?

Comment by Sebastien Buisson [ 03/Feb/21 ]

As a first step, I will copy the text from the documentations referenced above. There is also the old Lustre wiki that can be a good source as well:
http://wiki.old.lustre.org/index.php/GSS_/_Kerberos

Is there any convenient way to convert from HTML to the XML being used for the LOM?

Comment by Andreas Dilger [ 04/Feb/21 ]

Sebastien, it might be possible to import the HTML from that chapter into Word or maybe LibreOffice and then export it as Docbook. I believe that something similar was done for the original manual.

Comment by Sebastien Buisson [ 05/Feb/21 ]

I managed to generate a docbook documentation from HTML by first opening the HTML document into Word, save it as a Word document, and then run the following pandoc command:

pandoc -f docx -t docbook -o newdocbook.dbk --standalone original.docx
Comment by Gerrit Updater [ 05/Feb/21 ]

Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: https://review.whamcloud.com/41425
Subject: LUDOC-322 sec: reinstate Kerberos doc
Project: doc/manual
Branch: master
Current Patch Set: 1
Commit: 83e0d7eeb52472650ecac926892e7449717b1325

Comment by Gerrit Updater [ 20/Feb/21 ]

Andreas Dilger (adilger@whamcloud.com) merged in patch https://review.whamcloud.com/41425/
Subject: LUDOC-322 sec: reinstate Kerberos doc
Project: doc/manual
Branch: master
Current Patch Set:
Commit: 2c82bcd0e7356e9c228a95800789febec5fdc6b7

Generated at Sat Feb 10 03:42:00 UTC 2024 using Jira 9.4.14#940014-sha1:734e6822bbf0d45eff9af51f82432957f73aa32c.