Whamcloud - gitweb
LU-13343 gss: no sec flavor on loopback connection 04/46704/10
authorSebastien Buisson <sbuisson@ddn.com>
Fri, 4 Mar 2022 15:45:59 +0000 (16:45 +0100)
committerOleg Drokin <green@whamcloud.com>
Sat, 8 Jul 2023 22:34:00 +0000 (22:34 +0000)
commite3e91ea95fd96a5eafc598e3812390b4cbac05c3
treeb438c3545afa671f15a12b31571ee890bdaf4a38
parent530a302e10fc9ed6c9eeb8e8e3d37185af97e70c
LU-13343 gss: no sec flavor on loopback connection

When using a local client, i.e. a client mounted on a server node,
there is no benefit from a security standpoint to enforce an SSK or
KRB flavor, since the data does not go over the network.
So force the 'null' security flavor for connections on 0@lo,
independently of the currently defined srpc flavor.

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: If25d69bb1e67735cb0544ca954e49175f7471248
Reviewed-on: https://review.whamcloud.com/c/fs/lustre-release/+/46704
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Aurelien Degremont <adegremont@nvidia.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
Reviewed-by: James Simmons <jsimmons@infradead.org>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
lustre/lmv/lmv_obd.c
lustre/lov/lov_obd.c
lustre/ptlrpc/sec_config.c
lustre/tests/recovery-small.sh
lustre/tests/test-framework.sh