[prev in list] [next in list] [prev in thread] [next in thread]
List: lustre-discuss
Subject: [lustre-discuss] Lustre secure shared key setup
From: Ger Strikwerda via lustre-discuss <lustre-discuss () lists ! lustre ! org>
Date: 2024-02-28 14:07:07
Message-ID: 2ACDC0E9-F89F-44FB-8E7D-4AFA62C9A6FB () rug ! nl
[Download RAW message or body]
[Attachment #2 (multipart/alternative)]
Hello,
We, (University of Groningen) are still struggling to get ssk (secret shared key) \
setup to work with our Lustre infrastructure. Our usecase is that we want certain \
clients (only with a valid key) can mount a given filesystem
Questions we have:
Are there people out here using this ssk functionality in Lustre? And what are your \
experiences?
We followed the ssk steps in the Lustre Admin Guide but failed to get a stable \
system. Biggest errors on the client are
‘lgss_keyring[1766]: [1766]:ERROR:lgssc_negotiation_manual(): negotiation gss error \
d0000'.
The msg, mdt and ost mount without problems using keys.
This could be more of a lgss error than a Lustre error. But perhaps somebody can give \
us some pointers.
We did run test on Rocky 8 Lustre 2.15, but next run we will test on Rocky 9 (newer \
kernel and perhaps newer version lgss)
--
Vriendelijke groet,
Ger Strikwerda
senior expert multidisciplinary enabler
simple solution architect
Rijksuniversiteit Groningen
CIT/RDMS/HPC
Smitsborg
Nettelbosje 1
9747 AJ Groningen
Tel. 050 363 9276
"God is hard, God is fair
some men he gave brains, others he gave hair"
[Attachment #5 (unknown)]
<html><head><meta http-equiv="content-type" content="text/html; \
charset=utf-8"></head><body style="overflow-wrap: break-word; -webkit-nbsp-mode: \
space; line-break: after-white-space;"><div>Hello,</div><div><br></div><div><p \
style="margin: 0px; font-style: normal; font-variant-caps: normal; font-stretch: \
normal; font-size: 13px; line-height: normal; font-family: "Helvetica \
Neue"; font-size-adjust: none; font-kerning: auto; font-variant-alternates: \
normal; font-variant-ligatures: normal; font-variant-numeric: normal; \
font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: \
normal; font-feature-settings: normal; font-optical-sizing: auto; \
font-variation-settings: normal;">We, (University of Groningen) are still struggling \
to get ssk (secret shared key) setup to work with our Lustre infrastructure. Our \
usecase is that we want certain clients (only with a valid key) can mount a given \
filesystem</p> <p style="margin: 0px; font-style: normal; font-variant-caps: normal; \
font-stretch: normal; font-size: 13px; line-height: normal; font-family: \
"Helvetica Neue"; font-size-adjust: none; font-kerning: auto; \
font-variant-alternates: normal; font-variant-ligatures: normal; \
font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: \
normal; font-variant-emoji: normal; font-feature-settings: normal; \
font-optical-sizing: auto; font-variation-settings: normal; min-height: \
15px;"><br></p> <p style="margin: 0px; font-style: normal; font-variant-caps: normal; \
font-stretch: normal; font-size: 13px; line-height: normal; font-family: \
"Helvetica Neue"; font-size-adjust: none; font-kerning: auto; \
font-variant-alternates: normal; font-variant-ligatures: normal; \
font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: \
normal; font-variant-emoji: normal; font-feature-settings: normal; \
font-optical-sizing: auto; font-variation-settings: normal;">Questions we have:</p> \
<p style="margin: 0px; font-style: normal; font-variant-caps: normal; font-stretch: \
normal; font-size: 13px; line-height: normal; font-family: "Helvetica \
Neue"; font-size-adjust: none; font-kerning: auto; font-variant-alternates: \
normal; font-variant-ligatures: normal; font-variant-numeric: normal; \
font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: \
normal; font-feature-settings: normal; font-optical-sizing: auto; \
font-variation-settings: normal; min-height: 15px;"><br></p> <p style="margin: 0px; \
font-style: normal; font-variant-caps: normal; font-stretch: normal; font-size: 13px; \
line-height: normal; font-family: "Helvetica Neue"; font-size-adjust: none; \
font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; \
font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: \
normal; font-variant-emoji: normal; font-feature-settings: normal; \
font-optical-sizing: auto; font-variation-settings: normal;">Are there people out \
here using this ssk functionality in Lustre? And what are your experiences?</p> <p \
style="margin: 0px; font-style: normal; font-variant-caps: normal; font-stretch: \
normal; font-size: 13px; line-height: normal; font-family: "Helvetica \
Neue"; font-size-adjust: none; font-kerning: auto; font-variant-alternates: \
normal; font-variant-ligatures: normal; font-variant-numeric: normal; \
font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: \
normal; font-feature-settings: normal; font-optical-sizing: auto; \
font-variation-settings: normal; min-height: 15px;"><br></p> <p style="margin: 0px; \
font-style: normal; font-variant-caps: normal; font-stretch: normal; font-size: 13px; \
line-height: normal; font-family: "Helvetica Neue"; font-size-adjust: none; \
font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; \
font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: \
normal; font-variant-emoji: normal; font-feature-settings: normal; \
font-optical-sizing: auto; font-variation-settings: normal;">We followed the ssk \
steps in the Lustre Admin Guide but failed to get a stable system. Biggest errors on \
the client are </p><p style="margin: 0px; font-style: normal; font-variant-caps: \
normal; font-stretch: normal; font-size: 13px; line-height: normal; font-family: \
"Helvetica Neue"; font-size-adjust: none; font-kerning: auto; \
font-variant-alternates: normal; font-variant-ligatures: normal; \
font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: \
normal; font-variant-emoji: normal; font-feature-settings: normal; \
font-optical-sizing: auto; font-variation-settings: normal;"><br></p><p \
style="margin: 0px; font-style: normal; font-variant-caps: normal; font-stretch: \
normal; font-size: 13px; line-height: normal; font-family: "Helvetica \
Neue"; font-size-adjust: none; font-kerning: auto; font-variant-alternates: \
normal; font-variant-ligatures: normal; font-variant-numeric: normal; \
font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: \
normal; font-feature-settings: normal; font-optical-sizing: auto; \
font-variation-settings: normal;">‘lgss_keyring[1766]: \
[1766]:ERROR:lgssc_negotiation_manual(): negotiation gss error d0000'. </p><p \
style="margin: 0px; font-style: normal; font-variant-caps: normal; font-stretch: \
normal; font-size: 13px; line-height: normal; font-family: "Helvetica \
Neue"; font-size-adjust: none; font-kerning: auto; font-variant-alternates: \
normal; font-variant-ligatures: normal; font-variant-numeric: normal; \
font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: \
normal; font-feature-settings: normal; font-optical-sizing: auto; \
font-variation-settings: normal;"><br></p><p style="margin: 0px; font-style: normal; \
font-variant-caps: normal; font-stretch: normal; font-size: 13px; line-height: \
normal; font-family: "Helvetica Neue"; font-size-adjust: none; \
font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; \
font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: \
normal; font-variant-emoji: normal; font-feature-settings: normal; \
font-optical-sizing: auto; font-variation-settings: normal;">The msg, mdt and ost \
mount without problems using keys.</p><p style="margin: 0px; font-style: normal; \
font-variant-caps: normal; font-stretch: normal; font-size: 13px; line-height: \
normal; font-family: "Helvetica Neue"; font-size-adjust: none; \
font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: normal; \
font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: \
normal; font-variant-emoji: normal; font-feature-settings: normal; \
font-optical-sizing: auto; font-variation-settings: normal;"><br></p><p \
style="margin: 0px; font-style: normal; font-variant-caps: normal; font-stretch: \
normal; font-size: 13px; line-height: normal; font-family: "Helvetica \
Neue"; font-size-adjust: none; font-kerning: auto; font-variant-alternates: \
normal; font-variant-ligatures: normal; font-variant-numeric: normal; \
font-variant-east-asian: normal; font-variant-position: normal; font-variant-emoji: \
normal; font-feature-settings: normal; font-optical-sizing: auto; \
font-variation-settings: normal;">This could be more of a lgss error than a Lustre \
error. But perhaps somebody can give us some pointers. </p> <p style="margin: \
0px; font-style: normal; font-variant-caps: normal; font-stretch: normal; font-size: \
13px; line-height: normal; font-family: "Helvetica Neue"; font-size-adjust: \
none; font-kerning: auto; font-variant-alternates: normal; font-variant-ligatures: \
normal; font-variant-numeric: normal; font-variant-east-asian: normal; \
font-variant-position: normal; font-variant-emoji: normal; font-feature-settings: \
normal; font-optical-sizing: auto; font-variation-settings: normal; min-height: \
15px;"><br></p> <p style="margin: 0px; font-style: normal; font-variant-caps: normal; \
font-stretch: normal; font-size: 13px; line-height: normal; font-family: \
"Helvetica Neue"; font-size-adjust: none; font-kerning: auto; \
font-variant-alternates: normal; font-variant-ligatures: normal; \
font-variant-numeric: normal; font-variant-east-asian: normal; font-variant-position: \
normal; font-variant-emoji: normal; font-feature-settings: normal; \
font-optical-sizing: auto; font-variation-settings: normal;">We did run test on Rocky \
8 Lustre 2.15, but next run we will test on Rocky 9 (newer kernel and perhaps newer \
version lgss) </p></div><div><br></div><br><div> <meta \
charset="UTF-8">-- <br>Vriendelijke groet, <br><br><div>Ger \
Strikwerda</div><br class="Apple-interchange-newline">senior expert multidisciplinary \
enabler <br><div>simple solution architect</div><div>Rijksuniversiteit \
Groningen</div><div>CIT/RDMS/HPC </div><div><br></div><div>Smitsborg</div><div>Nettelbosje \
1</div><div>9747 AJ Groningen</div><div>Tel. 050 363 9276</div><br \
class="Apple-interchange-newline"><br>"God is hard, God is fair<br> some men he \
gave brains, others he gave hair" </div>
<br></body></html>
_______________________________________________
lustre-discuss mailing list
lustre-discuss@lists.lustre.org
http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org
[prev in list] [next in list] [prev in thread] [next in thread]
Configure |
About |
News |
Add a list |
Sponsored by KoreLogic