Whamcloud - gitweb
LU-16758 krb: use Kerberos machine principal in client
authorSebastien Buisson <sbuisson@ddn.com>
Fri, 21 Apr 2023 13:55:21 +0000 (15:55 +0200)
committerAndreas Dilger <adilger@whamcloud.com>
Fri, 12 May 2023 07:16:05 +0000 (07:16 +0000)
commit156d445be1aac98fb9db9dedb674003fa4e8a824
treeb2dbc91a2097f3cca76a8b5470b1ef1e0d599a2f
parentef9a0ebac51b6dc55051d3b1df50a8f3744f4779
LU-16758 krb: use Kerberos machine principal in client

In addition to having Lustre client rely on the
lustre_root/<hostname>@REALM principal to authenticate, support the
more standard Kerberos machine principal host/<hostname>@REALM.
That avoids the need for additional keytab entries, and brings Lustre
in line with other services such as OpenSSH and NFS.

Lustre-change: https://review.whamcloud.com/50709
Lustre-commit: 74890266a39297c1c3a41263a7bfd86e0d8e426a

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: Id50cef1a3a94248b958ce9ea42b5ae356f29cbf1
Reviewed-on: https://review.whamcloud.com/c/ex/lustre-release/+/50911
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
lustre/utils/gss/lgss_krb5_utils.c
lustre/utils/gss/lgss_utils.h
lustre/utils/gss/svcgssd.h
lustre/utils/gss/svcgssd_proc.c