Whamcloud - gitweb
LU-17317 gss: no cache flush for rsi and rsc 77/53377/3
authorSebastien Buisson <sbuisson@ddn.com>
Tue, 5 Dec 2023 16:02:21 +0000 (17:02 +0100)
committerOleg Drokin <green@whamcloud.com>
Wed, 20 Dec 2023 01:59:58 +0000 (01:59 +0000)
commit3615fa4a86be793652d53c94818c5aeb81e2257e
treea94ec4c279304b3f7ec297a5d85c93fc199d1e94
parent654d20cd6da68f12538fc8b98852e098f8ce9120
LU-17317 gss: no cache flush for rsi and rsc

RPCSEC init and RPCSEC context caches hold gss-related information
of security contexts established between network peers. These cache
entries are tightly coupled with contexts handled in the sptlrpc layer
so they must not be purged directly. They are inserted into the cache
when sptlrpc security contexts are established, and removed when the
corresponding security contexts are destroyed.

Test-Parameters: trivial
Test-Parameters: kerberos=true testlist=sanity-krb5
Test-Parameters: testgroup=review-dne-selinux-ssk-part-2
Fixes: 8d828762d1 ("LU-17015 gss: support large kerberos token for rpc sec init")
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I903f75a4b5229286fcaed3e9d96b5eee7f653f15
Reviewed-on: https://review.whamcloud.com/c/fs/lustre-release/+/53377
Reviewed-by: Oleg Drokin <green@whamcloud.com>
Reviewed-by: Aurelien Degremont <adegremont@nvidia.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
lustre/ptlrpc/gss/gss_internal.h
lustre/ptlrpc/gss/gss_svc_upcall.c
lustre/ptlrpc/gss/lproc_gss.c