bugGluster - Bugs: bug #17291, glusterfsd - clients should be...

 
 

bug #17291: glusterfsd - clients should be authenticated and handshake versions

Submitter:  Anand Avati <avati>
Submitted:  Thu 03 Aug 2006 06:03:59 PM UTC
   
 
Category:  GlusterFS Severity:  4 - Important
Priority:  5 - Normal Item Group:  Improper behaviour
Status:  Fixed Privacy:  Public
Assigned to:  amarts Originator Name:  *
Open/Closed:  Closed Release: 
Operating System:  GNU/Linux Reproducibility:  None
* Mandatory Fields

Add a New Comment Rich Markup
   

Tue 22 Aug 2006 06:30:19 PM UTC, comment #4: 

basic ip verification and port < 1024 (for checking if its root) is done.

client side option in spec file.
---
Option RemoteSubVolume Union
---

server side option in spec file.
---
Option AllowIP 192.168.1.*,127.0.0.1
---

Other authentication methods are postponed later versions.

Amar Tumballi <amarts>
Group Member
Sun 13 Aug 2006 08:01:01 AM UTC, comment #3: 

valid client IP lists + asserting client source port < 1024 should be the first level of implementation. At a later point certificate based authentication may be introduced.

IP validation happens at the time of 'attaching remote volume' where each node specifies its AllowedIP list.

for clients source port > 1024, only management read-only commands may be provided

Anand Avati <avati>
Group Member
Sat 05 Aug 2006 12:13:44 AM UTC, comment #2: 

Basic Export works now. Few more condition checks need to be implemented.

Amar Tumballi <amarts>
Group Member
Thu 03 Aug 2006 08:20:41 PM UTC, comment #1: 

The handshake should also select the volume to be mounted.

Anand Avati <avati>
Group Member
Thu 03 Aug 2006 06:03:59 PM UTC, original submission:  

clients should be authenticated. possibilities -

a. ip list
b. password
c. certificates

they should handshake and approve on each others protocol versions

Anand Avati <avati>
Group Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

Only logged-in users can vote.

 

Follow 5 latest changes.

Date Changed by Updated Field Previous Value => Replaced by
2006-08-22 amarts StatusIn Progress Fixed
    Open/ClosedOpen Closed
2006-08-13 avati Item GroupMissing Feature Improper behaviour
2006-08-04 amarts StatusNone In Progress
2006-08-03 avati Assigned toNone amarts

Back to the top

Powered by Savane 3.13-02a9.
Corresponding source code