bugGluster - Bugs: bug #17291, glusterfsd - clients should be...

 
 

bug #17291: glusterfsd - clients should be authenticated and handshake versions

Submitted by:  Anand Avati <avati>
Submitted on:  Thu 03 Aug 2006 06:03:59 PM UTC  
 
Category: GlusterFSSeverity: 4 - Important
Priority: 5 - NormalItem Group: Improper behaviour
Status: FixedPrivacy: Public
Assigned to: Amar Tumballi <amarts>Originator Name: 
Open/Closed: ClosedRelease: 
Operating System: GNU/LinuxReproducibility: None

Add a New Comment(Rich Markup)
   

You are not logged in

Please log in, so followups can be emailed to you.

 

Tue 22 Aug 2006 06:30:19 PM UTC, comment #4:

basic ip verification and port < 1024 (for checking if its root) is done.

client side option in spec file.
---
Option RemoteSubVolume Union
---

server side option in spec file.
---
Option AllowIP 192.168.1.*,127.0.0.1
---

Other authentication methods are postponed later versions.

Amar Tumballi <amarts>
Project MemberIn charge of this item.
Sun 13 Aug 2006 08:01:01 AM UTC, comment #3:

valid client IP lists + asserting client source port < 1024 should be the first level of implementation. At a later point certificate based authentication may be introduced.

IP validation happens at the time of 'attaching remote volume' where each node specifies its AllowedIP list.

for clients source port > 1024, only management read-only commands may be provided

Anand Avati <avati>
Project Member
Sat 05 Aug 2006 12:13:44 AM UTC, comment #2:

Basic Export works now. Few more condition checks need to be implemented.

Amar Tumballi <amarts>
Project MemberIn charge of this item.
Thu 03 Aug 2006 08:20:41 PM UTC, comment #1:

The handshake should also select the volume to be mounted.

Anand Avati <avati>
Project Member
Thu 03 Aug 2006 06:03:59 PM UTC, original submission:

clients should be authenticated. possibilities -

a. ip list
b. password
c. certificates

they should handshake and approve on each others protocol versions

Anand Avati <avati>
Project Member

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach File(s):
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

CC list is empty

 

Do you think this task is very important?
If so, you can click here to add your encouragement to it.
This task has 0 encouragements so far.

Only logged-in users can vote.

 

Please enter the title of George Orwell's famous dystopian book (it's a date):

 

 

Follow 5 latest changes.

Date Changed By Updated Field Previous Value => Replaced By
Tue 22 Aug 2006 06:30:19 PM UTCamartsStatusIn Progress=>Fixed
  Open/ClosedOpen=>Closed
Sun 13 Aug 2006 08:01:01 AM UTCavatiItem GroupMissing Feature=>Improper behaviour
Fri 04 Aug 2006 12:51:15 AM UTCamartsStatusNone=>In Progress
Thu 03 Aug 2006 08:20:41 PM UTCavatiAssigned toNone=>amarts

Back to the top


Powered by Savane 3.1-cleanup1