https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-17518 Lustre <p>On a kerberos enabled filesystem, the MDS should not trust the UID/GID/supplementary groups sent by the clients, and instead get the UID from the GSS context, and the GID and supplementary groups from the identity upcall.</p> LU-17518

MDS still trust client-originated support GID on a Kerberos enabled filesystem

Bug Minor Open Unresolved Sebastien Buisson Sebastien Buisson gss kerberos patch sec Fri, 9 Feb 2024 15:42:21 +0000 Fri, 9 Feb 2024 17:10:05 +0000 Lustre 2.16.0 0 3 <p>"Sebastien Buisson &lt;sbuisson@ddn.com&gt;" uploaded a new patch: <a href="https://review.whamcloud.com/c/fs/lustre-release/+/53987" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/c/fs/lustre-release/+/53987</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-17518" title="MDS still trust client-originated support GID on a Kerberos enabled filesystem" class="issue-link" data-issue-key="LU-17518">LU-17518</a> gss: do not trust supp groups from client with krb<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 04b9ba203ef36f71ed8407cccdc8ba9a70617e49</p> Related Development Rank 1|i04azb: Rank (Obsolete) 9223372036854775807 Severity