Whamcloud Community JIRA

Whamcloud Community JIRA https://jira.whamcloud.com This file is an XML representation of an issue en-us

9.4.14

940014

05-12-2023

[LU-17015] Support large Kerberos tokens https://jira.whamcloud.com/browse/LU-17015 Lustre <p>Depending on the Kerberos configuration on a system, Kerberos tokens can be quite large (e.g. 2,5k). The Lustre code must be able to handle this.</p> LU-17015

Support large Kerberos tokens

Bug Minor Resolved Fixed Sebastien Buisson Sebastien Buisson kerberos sec Thu, 3 Aug 2023 14:21:54 +0000 Wed, 17 Jan 2024 23:41:10 +0000 Wed, 13 Dec 2023 15:16:27 +0000 Lustre 2.16.0 Lustre 2.16.0 0 6 <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/51866" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/51866</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> sec: support large Kerberos tokens<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: a67c7d6da394837ed36978e3d3aff54f60dcdc5e</p> <p>"Aurelien Degremont <adegremont@nvidia.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/51946" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/51946</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: support large kerberos token on client side<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 6a8d6d5c1cf43950b400db8687b0116fc263fa15</p> <p>A smaller patch to land the client side fix quickly. The first patch will be rebase onto this one and will handle the server side fix.</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52128" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52128</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> obdclass: make upcall cache hashtable size dynamic<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 2d8cde1c12d2b8e926857f05db97a907897f2943</p> <p>"Oleg Drokin <green@whamcloud.com>" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/51946/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/51946/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: support large kerberos token on client<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 9758129177f11515d1f11cffc1e45f659ffd28a2</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52224" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52224</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: support large kerberos token on server<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 8d45e75cc4481b4f9fb64e20111674412988c715</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52271" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52271</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> obdclass: set cache entry/acquire expiry at init<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 2d24c820f32699d66b56024ae99a7b27944f6130</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52305" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52305</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: support large kerberos token for rpc sec ctxt<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: f0a6ba4e59dda3d090ba4203b5b5f8f147f2bca9</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52344" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52344</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> dbg: debug sanity-sec test_31<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 00953e35abfefb5b777ee835a215e7bff706a87f</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52347" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52347</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> dbg: debug sanity-sec test_31 - 2<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: e8ce844c9ea1d79ebc419b56f88814064470c5e2</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52348" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52348</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> dbg: debug sanity-sec test_31 - 3<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: c6a8945aa6dc050dc632b5fba4f8c32eeff27984</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52349" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52349</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> dbg: debug sanity-sec test_31 - 4<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 5ab436ac9ba257d827757366de9e3c94544b7a57</p> <p>"Oleg Drokin <green@whamcloud.com>" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52128/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52128/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> obdclass: make upcall cache hashtable size dynamic<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 79f823bd40ee97a5846d828efce1080dc04a6057</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52376" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52376</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: remove legacy sunrpc-cache based gss caches<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 243c4e6cfa3ae2db568f02e4a18e7f71373ead92</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52377" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52377</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> dbg: debug sanity-krb5 test_8<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 1d0620a5814e4a8ebde9d7776ff9133e219fcc55</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52389" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52389</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> obdclass: new primitives for upcall cache<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: aebd8fe7df20625fb96d2dd5f5627fcd68cdaec6</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52450" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52450</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> dbg: debug tests<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 13151379e0d216ab267b14cb269dfe1452fefef4</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52475" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52475</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: bump token buffer size to 16KiB<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: e9ae6967d9ea0abd8fedb29df8e4c8d96baa4fca</p> <p>"Oleg Drokin <green@whamcloud.com>" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52271/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52271/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> obdclass: set cache entry/acquire expiry at init<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 407167f4d18522fb47821030e3b171cbdb7158a0</p> <p>"Oleg Drokin <green@whamcloud.com>" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52389/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52389/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> obdclass: new primitives for upcall cache<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 2ddb1d33245c23c4cafe64fb917323bdf567c81f</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52555" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52555</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> dbg: debug sanity-sec test_23a - 1<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: c427bb5fa2ac2e73b8f7c3aceffb2944800cf285</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52629" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52629</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> sec: fix PTLRPC_CTX_STATUS_MASK<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 28c459256c327a7ae80b9fe28b350427a3424089</p> <p>"Sebastien Buisson <sbuisson@ddn.com>" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52689" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52689</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: add more debug messages<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 60c79421164f92ff8c54d9489aa2cf9f7faf3795</p> <p>"Oleg Drokin <green@whamcloud.com>" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52475/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52475/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: bump token buffer size to 16KiB<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 8d82cf1413752c8ab5b9a5eb51611fb2bc1e64d7</p> <p>"Oleg Drokin <green@whamcloud.com>" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52224/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52224/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: support large kerberos token for rpc sec init<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 8d828762d18ffaa2945bde56039127d0e75aceb3</p> <p>"Oleg Drokin <green@whamcloud.com>" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52305/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52305/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: support large kerberos token for rpc sec ctxt<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 473a41fec6fb600c9b6e26010d88772f5252d1e1</p> <p>"Oleg Drokin <green@whamcloud.com>" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52689/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52689/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: avoid request replay<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: d0194a4b5f6efa26d5473c2793b525f5fdb77e67</p> <p>"Oleg Drokin <green@whamcloud.com>" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52376/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52376/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> gss: remove legacy sunrpc-cache based gss caches<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 8665ba238412f407963724413e137b89d5cd384f</p> <p>"Oleg Drokin <green@whamcloud.com>" merged in patch <a href="https://review.whamcloud.com/c/fs/lustre-release/+/52629/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/52629/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17015" title="Support large Kerberos tokens" class="issue-link" data-issue-key="LU-17015"><del>LU-17015</del></a> sec: fix PTLRPC_CTX_STATUS_MASK<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: c744221a1fd55df33ca2b0e3e1b1ffd7ef3a986d</p> <p>All work tracked under this ticket merged for 2.16</p> Related LU-3855 Development Rank 1|i03s9b: Rank (Obsolete) 9223372036854775807 Severity