Whamcloud - gitweb
LU-15922 sec: new connect flag for name encryption 52/47852/5
authorSebastien Buisson <sbuisson@ddn.com>
Thu, 9 Jun 2022 08:00:52 +0000 (10:00 +0200)
committerOleg Drokin <green@whamcloud.com>
Mon, 11 Jul 2022 22:17:16 +0000 (22:17 +0000)
commit271f414ffecf5f93337c1aab7ba2dec1ebd36014
treee9b049bebbbbded74b8b1b9ac3d8a72295e6b429
parent64eaad6bb1ce4e2ade98d70102e685ece277b925
LU-15922 sec: new connect flag for name encryption

Introduce OBD_CONNECT2_ENCRYPT_NAME connection flag for compatibility
with older versions that do not support name encryption.
When server side does not have this flag, client side is forced to
null encryption for file names. And client needs to use old xattr to
store encryption context.

Also update tests in sanity-sec to exercise name encryption only if
server side supports it.

Lustre-change: https://review.whamcloud.com/47574
Lustre-commit: 71d63602c57e6d0cb723ae02ea767c6c170e5997

Fixes: ed4a625d88 ("LU-13717 sec: filename encryption - digest support")
Test-Parameters: serverversion=2.14 testlist=sanity-sec mdscount=2 mdtcount=4 osscount=1 ostcount=8 clientcount=2 fstype=ldiskfs
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I446a4caba8e45821d701628a14c96f03cb6c4525
Reviewed-on: https://review.whamcloud.com/47852
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
Tested-by: jenkins <devops@whamcloud.com>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
Tested-by: Oleg Drokin <green@whamcloud.com>
17 files changed:
libcfs/include/libcfs/crypto/llcrypt.h
libcfs/libcfs/crypto/keysetup.c
lustre/include/lustre_crypto.h
lustre/include/uapi/linux/lustre/lustre_idl.h
lustre/llite/crypto.c
lustre/llite/llite_internal.h
lustre/llite/llite_lib.c
lustre/llite/lproc_llite.c
lustre/llite/namei.c
lustre/llite/statahead.c
lustre/llite/super25.c
lustre/llite/xattr_cache.c
lustre/obdclass/lprocfs_status.c
lustre/ptlrpc/wiretest.c
lustre/tests/sanity-sec.sh
lustre/utils/wirecheck.c
lustre/utils/wiretest.c