https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-14151 Lustre <p>When running Lustre client on RHEL8.2, Kerberos authentication can fail with the following message:</p> <div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent"> <pre>LustreError: 323835:0:(gss_crypto.c:68:gss_keyblock_init()) failed to allocate tfm: cbc(aes), mode 0: rc = -2 </pre> </div></div> <p>Problem stems from the fact that in RHEL8.2 (and Ubuntu 18.04 and possibly newer distros, as it depends on the kernel), the cbc(aes) crypto engine's type is now skcipher. In previous distros like RHEL7, type is blkcipher. This type has an impact on the primitive to call from Lustre in order to allocate an associated cipher handle.</p> LU-14151

GSS context initialization fails on RHEL8.2 client

Bug Minor Resolved Fixed Sebastien Buisson Sebastien Buisson gss patch Thu, 26 Nov 2020 16:28:54 +0000 Wed, 16 Dec 2020 13:35:27 +0000 Sun, 13 Dec 2020 16:02:28 +0000 Lustre 2.14.0 0 3 <p>Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: <a href="https://review.whamcloud.com/40768" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/40768</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-14151" title="GSS context initialization fails on RHEL8.2 client" class="issue-link" data-issue-key="LU-14151"><del>LU-14151</del></a> gss: use skcipher when sync_skcipher not available<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 614d01296f043bbef9c5782e9ef37b01e71ca1b7</p> <p>Oleg Drokin (green@whamcloud.com) merged in patch <a href="https://review.whamcloud.com/40768/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/40768/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-14151" title="GSS context initialization fails on RHEL8.2 client" class="issue-link" data-issue-key="LU-14151"><del>LU-14151</del></a> gss: use skcipher when sync_skcipher not available<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: b6eb0c84a3e8ada2dff1d32a3b8bcf80e6ebd246</p> <p>Landed for 2.14</p> <p>Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: <a href="https://review.whamcloud.com/40997" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/40997</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-14151" title="GSS context initialization fails on RHEL8.2 client" class="issue-link" data-issue-key="LU-14151"><del>LU-14151</del></a> gss: use skcipher when sync_skcipher not available<br/> Project: fs/lustre-release<br/> Branch: b2_12<br/> Current Patch Set: 1<br/> Commit: 23d6fb2a7bb394b3981b540cf376007851cfcd36</p> Related LU-14095 Development Rank 1|i01fuv: Rank (Obsolete) 9223372036854775807 Severity