Whamcloud Community JIRA https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 [LU-6020] Bugfixes for GSS/Kerberos https://jira.whamcloud.com/browse/LU-6020 Lustre <p>The attached file contains gss/kerberos fixes for Lustre 2.5 that we are using and a few public documents on gss/kerberos/rpcsec_gss/etc (for the reference).</p> <p>I'll be porting the patches for Intel's repository and pushing for review wrt my schedule.</p> LU-6020 Bugfixes for GSS/Kerberos Bug Minor Resolved Fixed WC Triage Andrew Perepechko Thu, 11 Dec 2014 16:56:57 +0000 Fri, 31 Mar 2017 17:33:20 +0000 Wed, 10 Feb 2016 03:07:59 +0000 Lustre 2.8.0 0 12 <p>Andrew, could you have a look at this patch <a href="http://review.whamcloud.com/#/c/5572/" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/#/c/5572/</a> please? basically I'm trying to remove obsolete capa code on the server side. I looked at your patch and they shouldn't conflict, AFAICS, but probably I missed something.</p> <p>Andrew Perepechko (andrew.perepechko@seagate.com) uploaded a new patch: <a href="http://review.whamcloud.com/13076" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/13076</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> kerberos: checksum errors when using kerberos<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: d9d7cd3420c1542d817cc61df90d0978631bf02d</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="http://review.whamcloud.com/13076/" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/13076/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> kerberos: checksum errors when using kerberos<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 527ffb003f20db73c463951416b408bff6e8e4cf</p> <p>Andrew Perepechko (andrew.perepechko@seagate.com) uploaded a new patch: <a href="http://review.whamcloud.com/13631" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/13631</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> kerberos: proper sg list initialization<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 1394152535f3929a061018c40ebcdb86d49c2ae5</p> <p>Looks like sg_init() was fixed for the non-GSS code in "<a href="https://jira.whamcloud.com/browse/LU-1714" title="crash upon loading libcfs module" class="issue-link" data-issue-key="LU-1714"><del>LU-1714</del></a> lnet: Properly initialize sg_magic value" <a href="http://review.whamcloud.com/3709" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/3709</a> but not in the GSS code.</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="http://review.whamcloud.com/13631/" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/13631/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> kerberos: proper sg list initialization<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: cc29ab50d271f62f540e71e23d041d2e414c2397</p> <p>Andrew Perepechko (andrew.perepechko@seagate.com) uploaded a new patch: <a href="http://review.whamcloud.com/14018" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/14018</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> kerberos: bulk nob is not corrected on bulk writes<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 2ba403703b5dcdbecba1b86b15f95478851f0b5c</p> <p>Andrew Perepechko (andrew.perepechko@seagate.com) uploaded a new patch: <a href="http://review.whamcloud.com/14019" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/14019</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> kerberos: sec_ops and lwp/osp fixes<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 216cb9ed8886d10e2957f4a9c19200af4c21546d</p> <p>Andrew Perepechko (andrew.perepechko@seagate.com) uploaded a new patch: <a href="http://review.whamcloud.com/14020" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/14020</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> kerberos: readdir bulk replies are not wrapped<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: d90ff20490d7a1ea958678ec0650fa0bae4dcba5</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="http://review.whamcloud.com/14018/" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/14018/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> kerberos: bulk nob is not corrected on bulk writes<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 116c203e1fd74989e096909006cfc90e5986b709</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="http://review.whamcloud.com/14020/" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/14020/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> kerberos: readdir bulk replies are not wrapped<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 32992594f37b00f2dd2d73b7e0534fdbd83ce017</p> <p>Andrew Perepechko (andrew.perepechko@seagate.com) uploaded a new patch: <a href="http://review.whamcloud.com/15546" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/15546</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> gss: lvcgssd wrapper<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 856197bc0693190ca93ebe998365a3b6b149382e</p> <p>It looks like buf_to_sg() code is wrong.</p> <p>A lot of buffer pointers that it gets as input are coming from vmalloc(), e.g. OBD_ALLOC_LARGE() in ptlrpc_add_rqs_to_pool().<br/> sg_set_buf() uses virt_to_page() to map virtual addresses to struct page, which does not work for vmalloc addresses.<br/> Lustre should get a fix similar to the one in upstream commit 0def10217e7b768a501d2c51ea6d5ee4332afe69.</p> <p>Things may appear working just because for the non-accelerated encryption/decryption case page references ops used for<br/> scatterwalk_pagedone()-&gt;flush_dcache_page() are, to the best of my knowledge, a no-op.</p> <p>The issue was discovered with Lustre 3.6-kernel-based client where even struct page dereference caused a kernel crash, since the page address itself did not have a mapping in page tables.</p> <p>Andrew Perepechko (andrew.perepechko@seagate.com) uploaded a new patch: <a href="http://review.whamcloud.com/17319" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/17319</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> gss: properly map buffers to sg<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 84369c8b794f84b3db1dfb6e081f522317eb4915</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="http://review.whamcloud.com/17319/" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/17319/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> gss: properly map buffers to sg<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: ffaebaf0750fe218ed93532382f70f61177cc121</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="http://review.whamcloud.com/15546/" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/15546/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-6020" title="Bugfixes for GSS/Kerberos" class="issue-link" data-issue-key="LU-6020"><del>LU-6020</del></a> gss: add lsvcgssd init.d wrapper<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 4bfb99a83b632b0ad26df4544e556250683b4d4d</p> <p>All patches have landed to master for 2.8</p> Duplicate Related LU-1714 LU-9279 LU-6490 Development Rank 1|hzx2br: Rank (Obsolete) 16772 Severity