Whamcloud - gitweb
LU-3289 gss: Add two additional security flavors for sk 73/18773/8
authorJeremy Filizetti <jeremy.filizetti@gmail.com>
Thu, 3 Mar 2016 03:01:48 +0000 (22:01 -0500)
committerOleg Drokin <oleg.drokin@intel.com>
Mon, 13 Jun 2016 17:17:14 +0000 (17:17 +0000)
commit7dd6c394161a62b229ba65f50044a1d8f2da2d03
treeb47dc4078cf7e8ad2a08cb9c3ea8a0081f633588
parent61d492b8bab829e401c32583ee9d86b0655a95bc
LU-3289 gss: Add two additional security flavors for sk

This patch adds shared key null (skn) and shared key auth (ska)
flavors to make shared key consistent with the kerberos
implementation.  Shared key null requires a key to establish the
security context but does not use integrity or privacy outside of
the SEC_CTX_INIT RPC.  Shared key auth enables integrity for normal
service but not bulk.

Signed-off-by: Jeremy Filizetti <jeremy.filizetti@gmail.com>
Change-Id: I55fa52dfe1089f3dc9a40ffad28997a0b08aadec
Reviewed-on: http://review.whamcloud.com/18773
Tested-by: Jenkins
Tested-by: Maloo <hpdd-maloo@intel.com>
Reviewed-by: Sebastien Buisson <sbuisson@ddn.com>
Reviewed-by: John L. Hammond <john.hammond@intel.com>
Reviewed-by: Oleg Drokin <oleg.drokin@intel.com>
lustre/include/lustre_sec.h
lustre/ptlrpc/gss/gss_sk_mech.c
lustre/ptlrpc/sec.c