]> git.apps.os.sepia.ceph.com Git - ceph.git/commit
mon/MonClient: skip CEPHX_V2 challenge if client doesn't support it 30523/head
authorSage Weil <sage@redhat.com>
Mon, 23 Sep 2019 18:20:29 +0000 (13:20 -0500)
committerSage Weil <sage@redhat.com>
Mon, 23 Sep 2019 18:20:40 +0000 (13:20 -0500)
commit321548010578d6ff7bbf2e5ce8a550008b131423
tree8d35e2e302c46dbd386f159e98ca340fa2987753
parentab594b9b3181758927483d393020b5cf5e68a25a
mon/MonClient: skip CEPHX_V2 challenge if client doesn't support it

If the client doesn't support the CEPHX_V2 challenge, and we don't require
it, skip it.  This allows the client to authenticate without getting an
error like

  cephx: verify_reply couldn't decrypt with error: error decoding block for decryption

Note that we don't have this problem in the monitor exchange in
Monitor::handle_auth_request() because that verify_authorizer() caller is
only used for msgrv2, and all such clients support CEPHX_V2.  Instead,
those client authenticate via the MAuth messages, a path that does not use
authorizers at all.

Fixes: https://tracker.ceph.com/issues/40716
Signed-off-by: Sage Weil <sage@redhat.com>
src/mon/MonClient.cc