https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-16249 Lustre <p>A system has been configured with Kerberos and is able to mount and access the filesystem from authenticated clients with the kerberos flavor set to <tt>krb5i</tt>. If the flavor type is changed to <tt>krb5p</tt> then we get messages like:</p> <div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent"> <pre>lustre-test00-messages:Oct 11 08:58:34 lustre-test00 kernel: LustreError: 5215:0:(gss_krb5_mech.c:1518:gss_unwrap_bulk_kerberos()) checksum mismatch lustre-test00-messages:Oct 11 08:58:34 lustre-test00 kernel: LustreError: 5215:0:(gss_bulk.c:287:gss_cli_ctx_unwrap_bulk()) failed to decrypt bulk read: 60000 </pre> </div></div> LU-16249

Kerberos works with krb5i but not with krb5p

Bug Minor Resolved Fixed Sebastien Buisson Sebastien Buisson kerberos sec Tue, 18 Oct 2022 15:07:19 +0000 Mon, 5 Dec 2022 20:06:25 +0000 Wed, 2 Nov 2022 11:46:25 +0000 Lustre 2.16.0 Lustre 2.15.1 Lustre 2.16.0 Lustre 2.15.2 0 2 <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/48907" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/48907</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16249" title="Kerberos works with krb5i but not with krb5p" class="issue-link" data-issue-key="LU-16249"><del>LU-16249</del></a> sec: krb5_decrypt_bulk calls decryption primitive<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 851f3915659941db00a0cda58867e68139e5e0d1</p> <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/48908" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/48908</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16249" title="Kerberos works with krb5i but not with krb5p" class="issue-link" data-issue-key="LU-16249"><del>LU-16249</del></a> sec: krb5_decrypt_bulk calls decryption primitive<br/> Project: fs/lustre-release<br/> Branch: b2_15<br/> Current Patch Set: 1<br/> Commit: 8ce9cb54dfe08c89bbc6c2e16f411d39f2a55b1c</p> <p>"Oleg Drokin &lt;green@whamcloud.com&gt;" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/48907/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/48907/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16249" title="Kerberos works with krb5i but not with krb5p" class="issue-link" data-issue-key="LU-16249"><del>LU-16249</del></a> sec: krb5_decrypt_bulk calls decryption primitive<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: aaab50dd889d71b94784a7ae0a39d478216348b7</p> <p>Landed for 2.16</p> <p>"Oleg Drokin &lt;green@whamcloud.com&gt;" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/48908/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/48908/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-16249" title="Kerberos works with krb5i but not with krb5p" class="issue-link" data-issue-key="LU-16249"><del>LU-16249</del></a> sec: krb5_decrypt_bulk calls decryption primitive<br/> Project: fs/lustre-release<br/> Branch: b2_15<br/> Current Patch Set: <br/> Commit: 4bd14502297b17930e90fe969ea69f7fdbde6128</p> Related Development Rank 1|i0336n: Rank (Obsolete) 9223372036854775807 Severity