From: Benjamin Bennett <ben@psc.edu>
To: lustre-devel@lists.lustre.org
Subject: [Lustre-devel] GSS cross-realm broken in lsvcgssd
Date: Fri, 20 Jun 2008 00:16:51 -0400 [thread overview]
Message-ID: <485B2F33.2020608@psc.edu> (raw)
lsvcgssd from the current HEAD refuses all remote-realm principals, the
culprit is get_ids() in lustre/utils/gss/svcgssd_proc.c
In the previous revision (1.4):
MDS accepts remote principals with mapping to local user.
OSS accepts remote "lustre_root at SOMEREALM" principals.
Any other remote principals are logged as unmapped and failed.
In the current revision (1.5, since Jan):
MDS fails all remote principals.
OSS fails all remote principals.
Unmapped remote principals are logged, mapped are not.
The attached patch (against 1.5):
Restores previous MDS behavior of accepting remote principals with
mapping to local user.
Modifies OSS behavior to accept remote "lustre_root at SOMEREALM" and
"lustre_root/hostname at SOMEREALM" principals.
Fixes logging errors in get_ids().
Notice of any problems with this patch, or other suggestions, are
appreciated.
thanks,
--ben
-------------- next part --------------
A non-text attachment was scrubbed...
Name: lsvcgssd-xrealm.patch
Type: text/x-patch
Size: 3199 bytes
Desc: not available
URL: <http://lists.lustre.org/pipermail/lustre-devel-lustre.org/attachments/20080620/3fd48709/attachment.bin>
next reply other threads:[~2008-06-20 4:16 UTC|newest]
Thread overview: 2+ messages / expand[flat|nested] mbox.gz Atom feed top
2008-06-20 4:16 Benjamin Bennett [this message]
2008-06-20 16:13 ` [Lustre-devel] GSS cross-realm broken in lsvcgssd Eric Mei
Reply instructions:
You may reply publicly to this message via plain-text email
using any one of the following methods:
* Save the following mbox file, import it into your mail client,
and reply-to-all from there: mbox
Avoid top-posting and favor interleaved quoting:
https://en.wikipedia.org/wiki/Posting_style#Interleaved_style
* Reply using the --to, --cc, and --in-reply-to
switches of git-send-email(1):
git send-email \
--in-reply-to=485B2F33.2020608@psc.edu \
--to=ben@psc.edu \
--cc=lustre-devel@lists.lustre.org \
/path/to/YOUR_REPLY
https://kernel.org/pub/software/scm/git/docs/git-send-email.html
* If your mail client supports setting the In-Reply-To header
via mailto: links, try the mailto: link
Be sure your reply has a Subject: header at the top and a blank line
before the message body.
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.