https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-8602 Lustre <p>Currently the GSS code for Lustre directly uses the linux crypto API. This code uses struct crypto_hash which has now been removed in newer kernels for struct crypto_ahash. Libcfs crypto API has moved to this new kernel API but it doesn't have support for the algos that GSS wants to use. So the first question to ask is does GSS move to libcfs crypto API and we expand support in the libcfs crypto API to AES and DEC or do we ignore libcfs crypto API and just use the linux crypto api directly and use the newer ahash api.</p> Any system using GSS and a linux kernel 4.6 and above. LU-8602

Support GSS crypto code with linux 4.6 kernels

Improvement Minor Resolved Fixed James A Simmons James A Simmons Mon, 12 Sep 2016 15:40:25 +0000 Sat, 17 Nov 2018 03:12:24 +0000 Sat, 17 Nov 2018 02:57:21 +0000 Lustre 2.12.0 0 9 <p>Thanks for your efforts here James</p> <p>James Simmons (uja.ornl@yahoo.com) uploaded a new patch: <a href="http://review.whamcloud.com/23289" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/23289</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: Support GSS on linux 4.6+ kernels<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: f2603ddf218d9882dfe2f4f87fc27270218a543e</p> <p>Now that the GSS code has settled down I have create the linux 4.6 port. Its only a compile test since I don't have a GSS security setup to really test.</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="https://review.whamcloud.com/23289/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/23289/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: Support GSS on linux 4.6+ kernels<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: c6f5e8121366be05765dabe0008165166d3f431c</p> <p>James Simmons (uja.ornl@yahoo.com) uploaded a new patch: <a href="https://review.whamcloud.com/28309" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/28309</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: Properly port gss to newer crypto api.<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: c20d520c935b367571dbd04df139222531b5a35d</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="https://review.whamcloud.com/25199/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/25199/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> libcfs: call proper crypto algo when keys are passed in<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 53e967746f37d5f0322bfc984af3ce1c9517079b</p> <p>There is an bug in the autoconf code for LC_CONFIG_GSS; if LC_HAVE_CRYPTO_HASH sets enable_gss to no, but gss_conf_test==success, enable_gss is set back to yes and the build fails.</p> <p>Should I submit a patch? That code will go away when "gss: Properly port gss to newer crypto api" is landed, but I assume the latter will not be backported to 2.10 whereas the autoconf fix could be.</p> <p>Olaf Faaland-LLNL (faaland1@llnl.gov) uploaded a new patch: <a href="https://review.whamcloud.com/31095" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/31095</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: Fix autoconf check for crypto_hash<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 4d35ca99ac1a1e23c3ccf30303e88e5e7d063d79</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="https://review.whamcloud.com/31095/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/31095/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: Fix autoconf check for crypto_hash<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: f6329102615e111490c7955a0a9e8b8610f8a244</p> <p>The patch at <a href="https://review.whamcloud.com/31095" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/31095</a> breaks the ability to build SSK due to a script error:</p> <p>checking for krb5_derive_key in -lgssapi_krb5... no<br/> ./configure: line 21783: xyes: command not found<br/> checking whether OpenSSL has functions needed for SSK... no</p> <p>This is due to the second part of the if statement after the &amp;&amp;:<br/> AS_IF(<span class="error">&#91;test &quot;x$gss_conf_test&quot; = xsuccess &amp;&amp; &quot;x$enable_gss&quot; != xno&#93;</span>, [</p> <p>This should probably be<br/> AS_IF(<span class="error">&#91;test &quot;x$gss_conf_test&quot; = xsuccess &amp;&amp; test &quot;x$enable_gss&quot; != xno&#93;</span>, [</p> <p>Olaf Faaland-LLNL (faaland1@llnl.gov) uploaded a new patch: <a href="https://review.whamcloud.com/31191" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/31191</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: autoconf check missing "test" keyword<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 9b73c8b86b67f7f78b97c95ac81ff2d5f7a0bc69</p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="https://review.whamcloud.com/31191/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/31191/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: autoconf check missing "test" keyword<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 4dd55cb2bcffd681117b8513a91908afe0647108</p> <p>James</p> <p>Have you tried this recently? How does GSS behave with Ubuntu 18.04 clients?</p> <p>Peter</p> <p>Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: <a href="https://review.whamcloud.com/33493" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/33493</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: get rid of cfs_crypto_hash_desc<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 3ef2ea65e9701f8cee19d987c9927fe1e12779b9</p> <p>Sebastien Buisson (sbuisson@ddn.com) uploaded a new patch: <a href="https://review.whamcloud.com/33592" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/33592</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: support OpenSSL 1.1<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: 4cb1c93ba786b8378a808cd7a863f46b45eab238</p> <p>Sebastien I got everything to work on Ubuntu/Debian</p> <p>Oleg Drokin (green@whamcloud.com) merged in patch <a href="https://review.whamcloud.com/28309/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/28309/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: Properly port gss to newer crypto api.<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: a21c13d4df4bea1bec0f5804136740ed53d5a57f</p> <p>Oleg Drokin (green@whamcloud.com) merged in patch <a href="https://review.whamcloud.com/33493/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/33493/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: get rid of cfs_crypto_hash_desc<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 553d93361d2db4ff39bf19ac66dc2d79f6e3e324</p> <p>Oleg Drokin (green@whamcloud.com) merged in patch <a href="https://review.whamcloud.com/33592/" class="external-link" target="_blank" rel="nofollow noopener">https://review.whamcloud.com/33592/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-8602" title="Support GSS crypto code with linux 4.6 kernels" class="issue-link" data-issue-key="LU-8602"><del>LU-8602</del></a> gss: support OpenSSL 1.1<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: f44a953b30b2a439a9477ed5ecf599e172366493</p> Related LU-9795 LU-11635 LU-3289 LU-8560 LU-9073 LU-9245 LU-9430 Development Rank 1|hzyo0f: Rank (Obsolete) 9223372036854775807