Back to bug 1371475

Who When What Removed Added
Soumya Koduri 2016-08-30 10:04:17 UTC Depends On 1340608
CC skoduri
RHEL Program Management 2016-08-30 11:10:31 UTC Keywords FutureFeature
Atin Mukherjee 2016-09-17 11:36:41 UTC Blocks 1371650
Status NEW POST
Assignee kkeithle rjoseph
Status POST MODIFIED
errata-xmlrpc 2016-09-20 13:03:22 UTC Status MODIFIED ON_QA
Atin Mukherjee 2016-09-20 15:02:21 UTC Fixed In Version glusterfs-3.8.4-1
Ambarish 2016-09-21 11:28:58 UTC QA Contact sraj asoman
SATHEESARAN 2016-09-26 10:08:20 UTC CC sasundar
Blocks 1277939
Ambarish 2017-01-30 06:49:27 UTC Doc Text Cause: libgfapi does not check /var/lib/glusterd/secure-access file before making an RPC connection.

Consequence: Since presence of /var/lib/glusterd/secure-access file tells to enable management SSL
Doc Text , libgfapi never enables SSL on management connection. Therefore libgfapi fails to make connection if management SSL is enabled in Gluster Server.

Fix: Before making RPC connection libgfapi checks the presence of /var/lib/glusterd/secure-access file
Doc Text and based on it enables or disables SSL on management connecion.

Result: With this change now NFS Ganesha can enable SSL on management connection between Ganesha and glusterd (Gluster Server)
Doc Type If docs needed, set a value Enhancement
Status ON_QA VERIFIED
Laura Bailey 2017-03-08 10:32:21 UTC Doc Text Cause: libgfapi does not check /var/lib/glusterd/secure-access file before making an RPC connection.

Consequence: Since presence of /var/lib/glusterd/secure-access file tells to enable management SSL, libgfapi never enables SSL on management connection. Therefore libgfapi fails to make connection if management SSL is enabled in Gluster Server.

Fix: Before making RPC connection libgfapi checks the presence of /var/lib/glusterd/secure-access file and based on it enables or disables SSL on management connecion.

Result: With this change now NFS Ganesha can enable SSL on management connection between Ganesha and glusterd (Gluster Server)
Red Hat Gluster Storage now provides support for NFS-Ganesha to enable Transport Layer Security (SSL) on a management connection between the Ganesha and glusterd services. Libgfapi now checks for the /var/lib/glusterd/secure-access file before making an RPC connection and enables SSL on the management connection if the file is present.
Flags needinfo?(rjoseph)
Laura Bailey 2017-03-10 04:01:11 UTC Blocks 1351530
errata-xmlrpc 2017-03-23 00:52:56 UTC Status VERIFIED RELEASE_PENDING
errata-xmlrpc 2017-03-23 05:46:08 UTC Status RELEASE_PENDING CLOSED
Resolution --- ERRATA
Last Closed 2017-03-23 01:46:08 UTC

Back to bug 1371475