Whamcloud - gitweb
LU-14263 gss: unlink revoked key 47/41047/4
authorSebastien Buisson <sbuisson@ddn.com>
Fri, 18 Dec 2020 14:49:11 +0000 (23:49 +0900)
committerOleg Drokin <green@whamcloud.com>
Mon, 18 Jan 2021 07:32:13 +0000 (07:32 +0000)
commitc246a9ba041d651c4fae324284f7bbd97500998b
tree702f77e48c737f09b79a1fff37d48235526b0720
parentb9274179adf0939909ff2dd78d077515a64fd25f
LU-14263 gss: unlink revoked key

When a GSS context is destroyed, it is unbound from its key, marking
the key as revoked.
The key also needs to be unlinked from the session keyring. This way,
a subsequent context initialization will manage to create a new valid
key and link it to the keyring.

Similarly, add a new '-r' flag to 'lfs flushctx', in order to reap the
revoked keys from the keyring when flushing the GSS context.

Test-Parameters: trivial
Test-Parameters: clientdistro=el7.9 testgroup=review-dne-ssk
Test-Parameters: clientdistro=el8.3 testgroup=review-dne-ssk
Signed-off-by: Sebastien Buisson <sbuisson@ddn.com>
Change-Id: Ida4b4ea53202c1f40ad93816fb4ec96fec2bf8bc
Reviewed-on: https://review.whamcloud.com/41047
Tested-by: jenkins <devops@whamcloud.com>
Tested-by: Maloo <maloo@whamcloud.com>
Reviewed-by: Andreas Dilger <adilger@whamcloud.com>
Reviewed-by: Jian Yu <yujian@whamcloud.com>
Reviewed-by: Oleg Drokin <green@whamcloud.com>
lustre/doc/lfs-flushctx.1 [new file with mode: 0644]
lustre/doc/lfs.1
lustre/ptlrpc/gss/gss_keyring.c
lustre/utils/lfs.c