https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-11750 Lustre <p>When preparing RFP for customer DDBJ (DNA Bank of Japan), we noticed Lustre does not support latest krb5 version, as provided in CentOS 7.<br/> Indeed, from krb5-libs version 1.15, lsvcgssd daemon crashes when invoked for Kerberos credentials handling, thus preventing use of any Kerberos flavor with Lustre.</p> LU-11750

lsvcgssd crash with latest krb5-libs

Bug Critical Resolved Fixed Sebastien Buisson Sebastien Buisson krb5 patch Mon, 10 Dec 2018 17:08:50 +0000 Tue, 19 Mar 2019 14:33:30 +0000 Fri, 4 Jan 2019 05:06:06 +0000 Lustre 2.12.0 Lustre 2.10.5 Lustre 2.13.0 Lustre 2.12.1 0 2 <p>The issue is due to the following patch in krb5, adding support for aes-sha2:<br/> <a href="https://github.com/krb5/krb5/commit/135a9ac3c58b444998361a3b13f5decfdece2105" class="external-link" target="_blank" rel="nofollow noopener">https://github.com/krb5/krb5/commit/135a9ac3c58b444998361a3b13f5decfdece2105</a></p> <p>This patch modified the number of parameters taken by function krb5int_derive_key().</p> <p>I will propose a patch in Lustre to be able to support krb5int_derive_key() with 5 or 6 parameters.</p> <p>Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: <a href="https://review.whamcloud.com/33817" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/33817</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-11750" title="lsvcgssd crash with latest krb5-libs" class="issue-link" data-issue-key="LU-11750"><del>LU-11750</del></a> krb5: krb5int_derive_key has 'hash' extra parameter<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 9e8f4c75a40a23c14420341fca4e9ba48eaf4004</p> <p>Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: <a href="https://review.whamcloud.com/33818" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/33818</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-11750" title="lsvcgssd crash with latest krb5-libs" class="issue-link" data-issue-key="LU-11750"><del>LU-11750</del></a> krb5: krb5int_derive_key has 'hash' extra parameter<br/> Project: fs/lustre-release<br/> Branch: b2_10<br/> Current Patch Set: 1<br/> Commit: 15ea8b45726de55074e8cf89bd7c6b1b6a9ef002</p> <p>Oleg Drokin (green@whamcloud.com) merged in patch <a href="https://review.whamcloud.com/33817/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/33817/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-11750" title="lsvcgssd crash with latest krb5-libs" class="issue-link" data-issue-key="LU-11750"><del>LU-11750</del></a> krb5: krb5int_derive_key has 'hash' extra parameter<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 4d1d6ed7849b0532e44f2fd742d4e07b649d6f66</p> <p>Sebastien</p> <p>Do we want this for b2_12 also?</p> <p>Peter</p> <p>Yes, I will push a patch for 2.12 now that it has been rolled out.</p> <p>Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: <a href="https://review.whamcloud.com/33961" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/33961</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-11750" title="lsvcgssd crash with latest krb5-libs" class="issue-link" data-issue-key="LU-11750"><del>LU-11750</del></a> krb5: krb5int_derive_key has 'hash' extra parameter<br/> Project: fs/lustre-release<br/> Branch: b2_12<br/> Current Patch Set: 1<br/> Commit: 1cde0d1bad05c1d08774d9cdcc1e07b8521ba796</p> <p>Oleg Drokin (green@whamcloud.com) merged in patch <a href="https://review.whamcloud.com/33961/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/33961/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-11750" title="lsvcgssd crash with latest krb5-libs" class="issue-link" data-issue-key="LU-11750"><del>LU-11750</del></a> krb5: krb5int_derive_key has 'hash' extra parameter<br/> Project: fs/lustre-release<br/> Branch: b2_12<br/> Current Patch Set: <br/> Commit: 79efb69ef637538df360ef032981a56d34ed6a89</p> Development Rank 1|i007on: Rank (Obsolete) 9223372036854775807 Severity