Lustre GSSAPI/Kerberos Repair
So far, a few Kerberos/GSS patches have been submitted to the Lustre Gerrit repository:
- http://review.whamcloud.com/7960 "LU-4113 gss: uncatched error in gss_svc_upcall"
- http://review.whamcloud.com/7913 "LU-4085 build: gss/krb5 is disabled"
- http://review.whamcloud.com/7770 "LU-4012 gss: upcall fails due to removed calls"
Each of these review requests is essentially on its own Git branch, and it is easy to cherry-pick them into a repository (see each page to get a "cherry-pick" URL).
If you are interested to contribute to Lustre Kerberos, please see:
- https://wiki.hpdd.intel.com/display/PUB/Submitting+Changes
- https://wiki.hpdd.intel.com/display/PUB/Using+Gerrit
Note that while the majority of the Lustre code is tested for every patch that is submitted (8h or so per patch) the Kerberos code is NOT currently in the automated environment. It would be great if people with an understanding of Kerberos could look at the test scripts in lustre/tests/sanity-sec.sh and lustre/tests/sanity-gss.sh to see what needs to be done to get them working. Having those tests working would ensure that the Lustre Kerberos code would avoid breakage in the future.
Cheers, Andreas