]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
auth/cephx: share all tickets and connection_secret in initial reply
authorSage Weil <sage@redhat.com>
Wed, 16 Jan 2019 16:46:34 +0000 (10:46 -0600)
committerSage Weil <sage@redhat.com>
Thu, 7 Feb 2019 12:53:03 +0000 (06:53 -0600)
commit1adf313ef94aa2652e803e1808facacaa8f0572f
tree32f80376f1cb3b48f14bdbf29d63b3c11e0cc516
parent7dd93be90a8a0e0f15d2809c59c1e74f01021238
auth/cephx: share all tickets and connection_secret in initial reply

Previously, we would give the client the auth ticket, like a rbd TGT
(ticket granting ticket), and the client would then ask for all of the
other tickets it wants in a separate message.

Instead, have the client specify which tickets it wants up front and pass
them all at the same time.

Also, generate and share the connection_secret, which will be used for
encryption.

Signed-off-by: Sage Weil <sage@redhat.com>
src/auth/cephx/CephxClientHandler.cc
src/auth/cephx/CephxClientHandler.h
src/auth/cephx/CephxProtocol.cc
src/auth/cephx/CephxProtocol.h
src/auth/cephx/CephxServiceHandler.cc