23.07.2014 Views

Lustre 1.6 Operations Manual

Lustre 1.6 Operations Manual

Lustre 1.6 Operations Manual

SHOW MORE
SHOW LESS

Create successful ePaper yourself

Turn your PDF publications into a flip-book with our unique Google optimized e-Paper software.

11.2.2.6 Rules, Syntax and Examples<br />

The general rules and syntax for using Kerberos are:<br />

.srpc.flavor.[.]=flavor<br />

■<br />

■<br />

■<br />

: This could be filesystem name or specific MDT/OST device name. For<br />

example, lustre, lustre-MDT0000, lustre-OST0001.<br />

: LNET network name of the RPC initiator. For example, tcp0, elan1,<br />

o2ib0.<br />

: This could be one of cli2mdt, cli2ost, mdt2mdt, or mdt2ost. In<br />

most cases, you do not need to specify the part.<br />

Examples:<br />

■ Apply krb5i on ALL connections:<br />

■<br />

■<br />

mgs> lctl conf_param lustre.srpc.flavor.default=krb5i<br />

For nodes in network tcp0, use krb5p. All other nodes use null.<br />

mgs> lctl conf_param lustre.srpc.flavor.tcp0=krb5p<br />

mgs> lctl conf_param lustre.srpc.flavor.default=null<br />

For nodes in network tcp0, use krb5p; for nodes in elan1, use plain; Among other<br />

nodes, clients use krb5i to MDT/OST, MDT use null to other MDTs, MDT use<br />

plain to OSTs.<br />

mgs> lctl conf_param lustre.srpc.flavor.tcp0=krb5p<br />

mgs> lctl conf_param lustre.srpc.flavor.elan1=plain<br />

mgs> lctl conf_param lustre.srpc.flavor.default.cli2mdt=krb5i<br />

mgs> lctl conf_param lustre.srpc.flavor.default.cli2ost=krb5i<br />

mgs> lctl conf_param lustre.srpc.flavor.default.mdt2mdt=null<br />

mgs> lctl conf_param lustre.srpc.flavor.default.mdt2ost=plain<br />

Chapter 11 Kerberos 11-15

Hooray! Your file is uploaded and ready to be published.

Saved successfully!

Ooh no, something went wrong!