Whamcloud - gitweb
LU-18633 gss: carry out creds negotiation as user 52/57752/6
authorSebastien Buisson <sbuisson@ddn.com>
Tue, 14 Jan 2025 16:20:25 +0000 (17:20 +0100)
committerOleg Drokin <green@whamcloud.com>
Thu, 6 Feb 2025 01:29:24 +0000 (01:29 +0000)
commit7ff7bd1805ae2b5adfdb9dd2af01c09ab515d413
treefe01c71957a93da4432da6126cfaa5b8edbc2a67
parente3f98f9ba4a9e8df2cda56f6ed65bee21e2e78f6
LU-18633 gss: carry out creds negotiation as user

Instead of switching back to root id right after we did credentials
preparation, just do the whole credentials negotiation as the user.
We just need root privileges to proceed to ioctls that exchange data
with kernel space.

sanity-krb5 test_11 is added to exercise this.

Fixes: 6791fbc530 ("LU-18497 gss: carry out creds prepare as user")
Test-Parameters: trivial
Test-Parameters: testgroup=review-dne-selinux-ssk-part-1
Test-Parameters: testgroup=review-dne-selinux-ssk-part-2
Test-Parameters: kerberos=true testlist=sanity-krb5
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I93dd367abadca077e61c1910638337a2d80996c8
Reviewed-on: https://review.whamcloud.com/c/fs/lustre-release/+/57752
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Aurelien Degremont <adegremont@nvidia.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
lustre/tests/sanity-krb5.sh
lustre/utils/gss/lgss_keyring.c