<!-- 
RSS generated by JIRA (9.4.14#940014-sha1:734e6822bbf0d45eff9af51f82432957f73aa32c) at Sat Feb 10 02:35:55 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>Whamcloud Community JIRA</title>
    <link>https://jira.whamcloud.com</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.4.14</version>
        <build-number>940014</build-number>
        <build-date>05-12-2023</build-date>
    </build-info>


<item>
            <title>[LU-10531] GSS, Shared Key and Kerberos support broken in master and lustre 2.10</title>
                <link>https://jira.whamcloud.com/browse/LU-10531</link>
                <project id="10000" key="LU">Lustre</project>
                    <description>&lt;p&gt;GSS, Shared Key and Kerberos support is currently broken in master branch. It is indeed impossible to set any flavor for sptlrpc, whereas it is gssnull or ski or krb5&lt;/p&gt;
{n,a,i,p}
&lt;p&gt;.&lt;/p&gt;

&lt;p&gt;For instance, when doing &apos;lctl conf_param lustre.srpc.flavor.default=krb5n&apos; or &apos;lctl set_param -P lustre.srpc.flavor.default=krb5n&apos;, the command returns no error, but the value is never applied.&lt;/p&gt;

&lt;p&gt;The commit introducing this regression is the following, and aims at making &apos;lctl set_param -P&apos; functional:&lt;br/&gt;
&lt;a href=&quot;https://review.whamcloud.com/28590&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/28590&lt;/a&gt;&lt;/p&gt;

&lt;p&gt;As mentioned in this patch&apos;s comment, &quot;currently virtual attributes failover.nid, sptlrpc, and quota&lt;br/&gt;
are not fully supported. They will be addressed in later patches&quot;.&lt;/p&gt;

&lt;p&gt;As I understand &apos;lctl set_param -P&apos; needs more work to make it work for sptlrpc, the patch should not break &apos;lctl conf_param&apos; functionality for sptlrpc.&lt;/p&gt;</description>
                <environment></environment>
        <key id="50296">LU-10531</key>
            <summary>GSS, Shared Key and Kerberos support broken in master and lustre 2.10</summary>
                <type id="1" iconUrl="https://jira.whamcloud.com/secure/viewavatar?size=xsmall&amp;avatarId=11303&amp;avatarType=issuetype">Bug</type>
                                            <priority id="2" iconUrl="https://jira.whamcloud.com/images/icons/priorities/critical.svg">Critical</priority>
                        <status id="5" iconUrl="https://jira.whamcloud.com/images/icons/statuses/resolved.png" description="A resolution has been taken, and it is awaiting verification by reporter. From here issues are either reopened, or are closed.">Resolved</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="1">Fixed</resolution>
                                        <assignee username="simmonsja">James A Simmons</assignee>
                                    <reporter username="sbuisson">Sebastien Buisson</reporter>
                        <labels>
                            <label>gss</label>
                            <label>kerberos</label>
                            <label>patch</label>
                    </labels>
                <created>Thu, 18 Jan 2018 09:57:49 +0000</created>
                <updated>Fri, 9 Feb 2018 23:33:31 +0000</updated>
                            <resolved>Tue, 6 Feb 2018 04:57:10 +0000</resolved>
                                    <version>Lustre 2.11.0</version>
                    <version>Lustre 2.10.2</version>
                                    <fixVersion>Lustre 2.11.0</fixVersion>
                    <fixVersion>Lustre 2.10.4</fixVersion>
                                        <due></due>
                            <votes>0</votes>
                                    <watches>8</watches>
                                                                            <comments>
                            <comment id="218547" author="pjones" created="Thu, 18 Jan 2018 18:14:21 +0000"  >&lt;p&gt;James&lt;/p&gt;

&lt;p&gt;It looks like we should revert this change&lt;/p&gt;

&lt;p&gt;Peter&lt;/p&gt;</comment>
                            <comment id="218556" author="simmonsja" created="Thu, 18 Jan 2018 18:52:59 +0000"  >&lt;p&gt;Reverting will not help out since in my own testing sptlrpc was broken before this patch landed&#160;&lt;img class=&quot;emoticon&quot; src=&quot;https://jira.whamcloud.com/images/icons/emoticons/sad.png&quot; height=&quot;16&quot; width=&quot;16&quot; align=&quot;absmiddle&quot; alt=&quot;&quot; border=&quot;0&quot;/&gt;&#160;I just haven&apos;t had the cycles to track down the issue of why it was broken. Also in my testing tlrpc in lustre 2.10 is broken. Just to let you know.&lt;/p&gt;</comment>
                            <comment id="218562" author="pjones" created="Thu, 18 Jan 2018 19:33:14 +0000"  >&lt;p&gt;ok - thanks James. We&apos;ll hold off on the revert then&lt;/p&gt;</comment>
                            <comment id="218625" author="sbuisson" created="Fri, 19 Jan 2018 07:54:15 +0000"  >&lt;p&gt;Hi James, thanks for looking into this.&lt;/p&gt;

&lt;p&gt;What do you mean by &quot;sptlrpc was broken before patch &lt;a href=&quot;https://review.whamcloud.com/28590&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/28590&lt;/a&gt;, and in 2.10&quot;? While trying to narrow down the problem hit with &apos;lctl conf_param lustre.srpc.flavor.default=krb5n&apos;, I found it worked for all codes I was able to compile, except when patch &lt;a href=&quot;https://review.whamcloud.com/28590&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/28590&lt;/a&gt; was in the pile. By working I mean issuing the command and then seing that the given value had been taken into account under /proc/fs/lustre/&lt;b&gt;/&lt;/b&gt;/srpc_info on the clients and servers.&lt;/p&gt;</comment>
                            <comment id="218626" author="gerrit" created="Fri, 19 Jan 2018 08:01:36 +0000"  >&lt;p&gt;James Simmons (uja.ornl@yahoo.com) uploaded a new patch: &lt;a href=&quot;https://review.whamcloud.com/30937&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/30937&lt;/a&gt;&lt;br/&gt;
Subject: &lt;a href=&quot;https://jira.whamcloud.com/browse/LU-10531&quot; title=&quot;GSS, Shared Key and Kerberos support broken in master and lustre 2.10&quot; class=&quot;issue-link&quot; data-issue-key=&quot;LU-10531&quot;&gt;&lt;del&gt;LU-10531&lt;/del&gt;&lt;/a&gt; obd: handle case tgt equals fsname for obdname2fsname&lt;br/&gt;
Project: fs/lustre-release&lt;br/&gt;
Branch: master&lt;br/&gt;
Current Patch Set: 1&lt;br/&gt;
Commit: 95c5be01ec49795e36acae14223b7bdf24091c7a&lt;/p&gt;</comment>
                            <comment id="218627" author="simmonsja" created="Fri, 19 Jan 2018 08:02:58 +0000"  >&lt;p&gt;Back to the normal failures&#160;&lt;img class=&quot;emoticon&quot; src=&quot;https://jira.whamcloud.com/images/icons/emoticons/sad.png&quot; height=&quot;16&quot; width=&quot;16&quot; align=&quot;absmiddle&quot; alt=&quot;&quot; border=&quot;0&quot;/&gt;&lt;/p&gt;

&lt;p&gt;[ 445.426749] LustreError: 14736:0:(gss_keyring.c:1423:gss_kt_update()) negotiation: rpc err 0, gss err d0000&lt;br/&gt;
[ 445.428655] Lustre: 14730:0:(sec_gss.c:315:cli_ctx_expire()) ctx ffff8808453fa840(0-&amp;gt;lustre-MDT0000_UUID) get expired: 1516348553(+300s)&lt;br/&gt;
[ 445.428657] Lustre: 14730:0:(sec_gss.c:315:cli_ctx_expire()) Skipped 2 previous similar messages&lt;br/&gt;
[ 445.428757] Lustre: 4861:0:(sec_gss.c:1225:gss_cli_ctx_fini_common()) gss.keyring@ffff88102ffd3800: destroy ctx ffff8808453fa840(0-&amp;gt;lustre-MDT0000_UUID)&lt;br/&gt;
[ 445.428759] Lustre: 4861:0:(sec_gss.c:1225:gss_cli&lt;/p&gt;</comment>
                            <comment id="218665" author="simmonsja" created="Fri, 19 Jan 2018 18:06:45 +0000"  >&lt;p&gt;Sebastien I posted the errors I&apos;m seeing in the previous comment. For some reason the client can mount but no one can access the file system.&lt;/p&gt;

&lt;p&gt;The patch is ready for review &lt;img class=&quot;emoticon&quot; src=&quot;https://jira.whamcloud.com/images/icons/emoticons/smile.png&quot; height=&quot;16&quot; width=&quot;16&quot; align=&quot;absmiddle&quot; alt=&quot;&quot; border=&quot;0&quot;/&gt;&lt;/p&gt;</comment>
                            <comment id="218687" author="adilger" created="Fri, 19 Jan 2018 20:20:17 +0000"  >&lt;p&gt;It seems that we are still not getting regular enough testing of the Kerberos and SSK functionality to avoid regressions, and playing catch-up with regressions added a long time ago is a lot more work than finding recent regressions or preventing them in the first place.&lt;/p&gt;

&lt;p&gt;Nathan, Chris, Sebastien, is it possible for you guys to start running automated regression tests against master with SSK/Kerberos configured on a regular basis (e.g. daily against master, and as often as possible against new patches as time permits)?  That would avoid these kinds of problems from being introduced in the first place.&lt;/p&gt;
</comment>
                            <comment id="218899" author="gerrit" created="Tue, 23 Jan 2018 12:46:50 +0000"  >&lt;p&gt;Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: &lt;a href=&quot;https://review.whamcloud.com/30984&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/30984&lt;/a&gt;&lt;br/&gt;
Subject: &lt;a href=&quot;https://jira.whamcloud.com/browse/LU-10531&quot; title=&quot;GSS, Shared Key and Kerberos support broken in master and lustre 2.10&quot; class=&quot;issue-link&quot; data-issue-key=&quot;LU-10531&quot;&gt;&lt;del&gt;LU-10531&lt;/del&gt;&lt;/a&gt; gss: fix GSS support for DNE&lt;br/&gt;
Project: fs/lustre-release&lt;br/&gt;
Branch: master&lt;br/&gt;
Current Patch Set: 1&lt;br/&gt;
Commit: 0781aab3dabd84f9ad65c3e29613f8c29d4a8aa1&lt;/p&gt;</comment>
                            <comment id="218902" author="sbuisson" created="Tue, 23 Jan 2018 13:00:38 +0000"  >&lt;p&gt;Thanks to the patch &lt;a href=&quot;https://review.whamcloud.com/30937&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/30937&lt;/a&gt; from James, I am again able to set sptlrpc flavor with &apos;lctl conf_param&apos; commands (however it does not work with &apos;lctl set_param -P&apos;).&lt;br/&gt;
 Then I managed to have a working kerberized Lustre on my test system. I can access the FS from Lustre clients, and do not see the error messages showed by James &lt;a href=&quot;https://jira.hpdd.intel.com/browse/LU-10531?focusedCommentId=218627&amp;amp;page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#comment-218627&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;here&lt;/a&gt;.&lt;/p&gt;

&lt;p&gt;However, for DNE setups the new patch I just pushed in &lt;a href=&quot;https://review.whamcloud.com/30984&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/30984&lt;/a&gt; is mandatory. This is indeed another regression in Kerberos support, inadvertently introduced by patch &lt;a href=&quot;https://review.whamcloud.com/27823&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/27823&lt;/a&gt;.&lt;br/&gt;
 This new patch needs to be landed for 2.11.&lt;/p&gt;

&lt;p&gt;I agree we need more regular testing of GSS/SSK/Kerberos functionality. Manual testing of single patches cannot cover all cases all the time. At DDN we already have some resources for Lustre non-regression tests. I will see if it is possible to dedicate part of them to continuous Kerberos testing. I should get back to you on this matter in a couple of weeks.&lt;/p&gt;</comment>
                            <comment id="219505" author="gerrit" created="Wed, 31 Jan 2018 05:52:42 +0000"  >&lt;p&gt;Oleg Drokin (oleg.drokin@intel.com) merged in patch &lt;a href=&quot;https://review.whamcloud.com/30937/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/30937/&lt;/a&gt;&lt;br/&gt;
Subject: &lt;a href=&quot;https://jira.whamcloud.com/browse/LU-10531&quot; title=&quot;GSS, Shared Key and Kerberos support broken in master and lustre 2.10&quot; class=&quot;issue-link&quot; data-issue-key=&quot;LU-10531&quot;&gt;&lt;del&gt;LU-10531&lt;/del&gt;&lt;/a&gt; obd: handle case tgt equals fsname for obdname2fsname&lt;br/&gt;
Project: fs/lustre-release&lt;br/&gt;
Branch: master&lt;br/&gt;
Current Patch Set: &lt;br/&gt;
Commit: ac01abc2db2e82f87061eb0e6b2c03e28dad6a5b&lt;/p&gt;</comment>
                            <comment id="220045" author="gerrit" created="Tue, 6 Feb 2018 04:25:34 +0000"  >&lt;p&gt;Oleg Drokin (oleg.drokin@intel.com) merged in patch &lt;a href=&quot;https://review.whamcloud.com/30984/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/30984/&lt;/a&gt;&lt;br/&gt;
Subject: &lt;a href=&quot;https://jira.whamcloud.com/browse/LU-10531&quot; title=&quot;GSS, Shared Key and Kerberos support broken in master and lustre 2.10&quot; class=&quot;issue-link&quot; data-issue-key=&quot;LU-10531&quot;&gt;&lt;del&gt;LU-10531&lt;/del&gt;&lt;/a&gt; gss: fix GSS support for DNE&lt;br/&gt;
Project: fs/lustre-release&lt;br/&gt;
Branch: master&lt;br/&gt;
Current Patch Set: &lt;br/&gt;
Commit: 7327f66c2ca1d9762f6ea722f1433e4435f0a5b5&lt;/p&gt;</comment>
                            <comment id="220076" author="pjones" created="Tue, 6 Feb 2018 04:57:10 +0000"  >&lt;p&gt;Landed for 2.11&lt;/p&gt;</comment>
                            <comment id="220350" author="gerrit" created="Wed, 7 Feb 2018 19:25:32 +0000"  >&lt;p&gt;Minh Diep (minh.diep@intel.com) uploaded a new patch: &lt;a href=&quot;https://review.whamcloud.com/31208&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/31208&lt;/a&gt;&lt;br/&gt;
Subject: &lt;a href=&quot;https://jira.whamcloud.com/browse/LU-10531&quot; title=&quot;GSS, Shared Key and Kerberos support broken in master and lustre 2.10&quot; class=&quot;issue-link&quot; data-issue-key=&quot;LU-10531&quot;&gt;&lt;del&gt;LU-10531&lt;/del&gt;&lt;/a&gt; obd: handle case tgt equals fsname for obdname2fsname&lt;br/&gt;
Project: fs/lustre-release&lt;br/&gt;
Branch: b2_10&lt;br/&gt;
Current Patch Set: 1&lt;br/&gt;
Commit: 107076812f7ec31ce8c01fabc582282320965ea8&lt;/p&gt;</comment>
                            <comment id="220351" author="gerrit" created="Wed, 7 Feb 2018 19:25:33 +0000"  >&lt;p&gt;Minh Diep (minh.diep@intel.com) uploaded a new patch: &lt;a href=&quot;https://review.whamcloud.com/31209&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/31209&lt;/a&gt;&lt;br/&gt;
Subject: &lt;a href=&quot;https://jira.whamcloud.com/browse/LU-10531&quot; title=&quot;GSS, Shared Key and Kerberos support broken in master and lustre 2.10&quot; class=&quot;issue-link&quot; data-issue-key=&quot;LU-10531&quot;&gt;&lt;del&gt;LU-10531&lt;/del&gt;&lt;/a&gt; gss: fix GSS support for DNE&lt;br/&gt;
Project: fs/lustre-release&lt;br/&gt;
Branch: b2_10&lt;br/&gt;
Current Patch Set: 1&lt;br/&gt;
Commit: d577c60fdcaf59cd407c7e4e84074f04f1ae1466&lt;/p&gt;</comment>
                            <comment id="220664" author="gerrit" created="Fri, 9 Feb 2018 22:30:08 +0000"  >&lt;p&gt;John L. Hammond (john.hammond@intel.com) merged in patch &lt;a href=&quot;https://review.whamcloud.com/31208/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/31208/&lt;/a&gt;&lt;br/&gt;
Subject: &lt;a href=&quot;https://jira.whamcloud.com/browse/LU-10531&quot; title=&quot;GSS, Shared Key and Kerberos support broken in master and lustre 2.10&quot; class=&quot;issue-link&quot; data-issue-key=&quot;LU-10531&quot;&gt;&lt;del&gt;LU-10531&lt;/del&gt;&lt;/a&gt; obd: handle case tgt equals fsname for obdname2fsname&lt;br/&gt;
Project: fs/lustre-release&lt;br/&gt;
Branch: b2_10&lt;br/&gt;
Current Patch Set: &lt;br/&gt;
Commit: e23318986fa839997c504c1d87f73e937f7e9a7b&lt;/p&gt;</comment>
                            <comment id="220665" author="gerrit" created="Fri, 9 Feb 2018 22:30:17 +0000"  >&lt;p&gt;John L. Hammond (john.hammond@intel.com) merged in patch &lt;a href=&quot;https://review.whamcloud.com/31209/&quot; class=&quot;external-link&quot; target=&quot;_blank&quot; rel=&quot;nofollow noopener&quot;&gt;https://review.whamcloud.com/31209/&lt;/a&gt;&lt;br/&gt;
Subject: &lt;a href=&quot;https://jira.whamcloud.com/browse/LU-10531&quot; title=&quot;GSS, Shared Key and Kerberos support broken in master and lustre 2.10&quot; class=&quot;issue-link&quot; data-issue-key=&quot;LU-10531&quot;&gt;&lt;del&gt;LU-10531&lt;/del&gt;&lt;/a&gt; gss: fix GSS support for DNE&lt;br/&gt;
Project: fs/lustre-release&lt;br/&gt;
Branch: b2_10&lt;br/&gt;
Current Patch Set: &lt;br/&gt;
Commit: 3d270d3a5a9ffec79aa7d6ab4a7f131afbfb06d2&lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Related</name>
                                            <outwardlinks description="is related to ">
                                        <issuelink>
            <issuekey id="47492">LU-9795</issuekey>
        </issuelink>
                            </outwardlinks>
                                                                <inwardlinks description="is related to">
                                        <issuelink>
            <issuekey id="35152">LU-7854</issuekey>
        </issuelink>
                            </inwardlinks>
                                    </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                            <customfield id="customfield_10890" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10390" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hzzrbb:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10090" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10060" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Severity</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10022"><![CDATA[3]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                        </customfields>
    </item>
</channel>
</rss>