https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-13754 Lustre <p>With CentOS/RHEL 7.8, it seems impossible for clients to authenticate with servers when a Kerberos or SSK flavor is enforced.</p> <p>The client console shows:</p> <div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent"> <pre>[ 1152.954776] Lustre: DEBUG MARKER: /usr/sbin/lctl mark -----============= acceptance-small: sanity ============----- Fri Jun 26 18:16:14 UTC 2020 [ 1153.535844] Lustre: DEBUG MARKER: -----============= acceptance-small: sanity ============----- Fri Jun 26 18:16:14 UTC 2020 [ 1154.279614] Lustre: DEBUG MARKER: /usr/sbin/lctl mark == sanity test complete, duration -o sec ============================================================= 18:16:15 \(1593195375\) [ 1154.866121] Lustre: DEBUG MARKER: == sanity test complete, duration -o sec ============================================================= 18:16:15 (1593195375) [ 1156.755955] Lustre: DEBUG MARKER: /usr/sbin/lctl get_param -n version 2&gt;/dev/null [ 1157.639632] Lustre: DEBUG MARKER: /usr/sbin/lctl mark excepting tests: 42a 42b 42c 407 312 56ob 17n 60a 133g 300f [ 1158.222239] Lustre: DEBUG MARKER: excepting tests: 42a 42b 42c 407 312 56ob 17n 60a 133g 300f [ 1158.853766] Lustre: DEBUG MARKER: /usr/sbin/lctl mark skipping tests SLOW=no: 27m 64b 68 71 115 135 136 300o [ 1159.435119] Lustre: DEBUG MARKER: skipping tests SLOW=no: 27m 64b 68 71 115 135 136 300o [ 1163.400808] Lustre: 24745:0:(client.c:2261:ptlrpc_expire_one_request()) @@@ Request sent has timed out for slow reply: [sent 1593195377/real 1593195377] req@ffff912863195680 x1670585430065920/t0(0) o801-&gt;lustre-MDT0000-mdc-ffff91287754e000@10.2.5.166@tcp:12/10 lens 224/224 e 0 to 1 dl 1593195385 ref 2 fl Rpc:XQr/0/ffffffff rc 0/-1 job:'lgss_keyring.0' [ 1163.405873] Lustre: 24745:0:(client.c:2261:ptlrpc_expire_one_request()) Skipped 31 previous similar messages [ 1163.407582] LustreError: 24745:0:(gss_keyring.c:1435:gss_kt_update()) negotiation: rpc err -85, gss err 0 [ 1163.409156] LustreError: 24745:0:(gss_keyring.c:1435:gss_kt_update()) Skipped 31 previous similar messages [ 1163.411036] Lustre: 24745:0:(sec_gss.c:315:cli_ctx_expire()) ctx ffff912863eedd00(0-&gt;lustre-MDT0000_UUID) get expired: 1593195417(+32s) [ 1163.413059] Lustre: 24745:0:(sec_gss.c:315:cli_ctx_expire()) Skipped 30 previous similar messages </pre> </div></div> <p>So all authentication requests fail on timeout.</p> LU-13754

GSS-based authentication fails on CentOS/RHEL 7.8

Bug Major Resolved Fixed Sebastien Buisson Sebastien Buisson gss sec Tue, 7 Jul 2020 14:56:31 +0000 Thu, 18 Mar 2021 03:21:46 +0000 Fri, 17 Jul 2020 21:24:16 +0000 Lustre 2.14.0 Lustre 2.12.5 Lustre 2.14.0 Lustre 2.12.7 0 4 <p>Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: <a href="https://review.whamcloud.com/39297" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/39297</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-13754" title="GSS-based authentication fails on CentOS/RHEL 7.8" class="issue-link" data-issue-key="LU-13754"><del>LU-13754</del></a> gss: open sptlrpc init channel in R+W mode<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: df980d5b1f540505acfa02b5a6374227e5453dc9</p> <p>It looks like this patch is sufficient, my build system kept leaving it out due to some stale cache not getting cleaned up. Sorry for the confusion earlier. This probably should get applied to 2.12.5 as well.</p> <p>Thanks for the heads up Jeremy.</p> <p>Indeed, it will be needed to backport to b2_12 so that GSS-based authentication is fixed on CentOS 7.8 with this Lustre version as well.</p> <p>Oleg Drokin (green@whamcloud.com) merged in patch <a href="https://review.whamcloud.com/39297/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/39297/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-13754" title="GSS-based authentication fails on CentOS/RHEL 7.8" class="issue-link" data-issue-key="LU-13754"><del>LU-13754</del></a> gss: open sptlrpc init channel in R+W mode<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 0d59f1a2c1e88495d1d697acabb572f67ccc211e</p> <p>Landed for 2.14</p> <p>Jian Yu (yujian@whamcloud.com) uploaded a new patch: <a href="https://review.whamcloud.com/40367" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/40367</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-13754" title="GSS-based authentication fails on CentOS/RHEL 7.8" class="issue-link" data-issue-key="LU-13754"><del>LU-13754</del></a> gss: open sptlrpc init channel in R+W mode<br/> Project: fs/lustre-release<br/> Branch: b2_12<br/> Current Patch Set: 1<br/> Commit: aeb3122cf655160a7a98047e0f7376b18abf4694</p> <p>Oleg Drokin (green@whamcloud.com) merged in patch <a href="https://review.whamcloud.com/40367/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/40367/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-13754" title="GSS-based authentication fails on CentOS/RHEL 7.8" class="issue-link" data-issue-key="LU-13754"><del>LU-13754</del></a> gss: open sptlrpc init channel in R+W mode<br/> Project: fs/lustre-release<br/> Branch: b2_12<br/> Current Patch Set: <br/> Commit: 85fdf484884240094ffd20eecac91089f2d197cd</p> Related LU-13739 Development Rank 1|i014hz: Rank (Obsolete) 9223372036854775807 Severity