Whamcloud - gitweb
LU-7604 gss: handle revoked keys properly 21/17721/3
authorSebastien Buisson <sbuisson@ddn.com>
Wed, 23 Dec 2015 20:18:57 +0000 (21:18 +0100)
committerOleg Drokin <oleg.drokin@intel.com>
Wed, 6 Jan 2016 20:02:22 +0000 (20:02 +0000)
commitfa4646291c7059597bd5d682f0c6c89b65ecf97e
tree0377837a1f65b2b0b28b0990988ac640a9dd158e
parent952a681628d685f1afa8e68c09f10179d03c7244
LU-7604 gss: handle revoked keys properly

Revoked keys are no longer returned by request_key kernel
function. So it is now necessary to remove revoked keys from
keyring when flushing context.
Moreover, if a revoked key is present, do not consider it
matches when searching for a valid key with request_key. That
way it will be replaced with a valid, newly created one.

Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: I0fbaf01f6a8f50e9fb06eef96c74e73c25de257f
Reviewed-on: http://review.whamcloud.com/17721
Tested-by: Jenkins
Reviewed-by: Jeremy Filizetti <jeremy.filizetti@gmail.com>
Tested-by: James Nunez <james.a.nunez@intel.com>
Tested-by: Maloo <hpdd-maloo@intel.com>
Reviewed-by: John L. Hammond <john.hammond@intel.com>
Reviewed-by: Oleg Drokin <oleg.drokin@intel.com>
lustre/ptlrpc/gss/gss_keyring.c