https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-15267 Lustre <p>A group upcall utility based on l_getidentity.c , which can use all system NSS modules as well as lustre-only user/group configuration in plain files keeping Lustre users and groups separate from Linux users/groups on Lustre server's machines for security reasons.</p> LU-15267

l_getidentity_nss utility

Improvement Minor Resolved Duplicate Alexander Zarochentsev Alexander Zarochentsev Mon, 22 Nov 2021 18:14:56 +0000 Wed, 13 Sep 2023 20:26:20 +0000 Wed, 13 Sep 2023 20:26:20 +0000 0 4 <p>"Alexander Zarochentsev &lt;alexander.zarochentsev@hpe.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/45634" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/45634</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-15267" title="l_getidentity_nss utility" class="issue-link" data-issue-key="LU-15267"><del>LU-15267</del></a> utils: l_getidentity_nss<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 1a50496b2efaba18f2ce87fac9b02d75bacaad95</p> <p>I'll ask the same question here as in the patch - how is this different than the existing <tt>l_getidentity</tt> using the built-in <tt>/etc/nsswitch.conf</tt> support when calling the Glibc getpwuid/getgrouplist to do lookups in LDAP, NIS, SSS?</p> <p>I'm definitely not against improving MDS integration with different authentication schemes, but my main concern is that this duplicates a bunch of code and adds configuration complexity for users, and it isn't yet clear what the benefit is, or whether this needs to be a separate utility, or could be integrated into the existing one?</p> <p>Close as a duplicate of <a href="https://jira.whamcloud.com/browse/LU-16901" title="Provide l_getidentity_nss identity provider" class="issue-link" data-issue-key="LU-16901"><del>LU-16901</del></a>.</p> Duplicate LU-16901 Development Rank 1|i02anz: Rank (Obsolete) 9223372036854775807