Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Change munge authentication message #1230

Merged
merged 1 commit into from
Jul 19, 2023
Merged

Change munge authentication message #1230

merged 1 commit into from
Jul 19, 2023

Conversation

tom95858
Copy link
Collaborator

@tom95858 tom95858 commented Jul 13, 2023

Change munge error message to info

The munge authentication message consists of the
local and remote addresses of the transport between
the two peers. This message presumes that both peers see
the same addresses (albeit swapped). This assumption is
false in many routed and NAT'd environments.

This change replaces the error with an informational message
so that administrators will be aware of this difference
and can make a determination whether or not this difference
is expected.

@tom95858 tom95858 force-pushed the munge-fix branch 2 times, most recently from 216ae59 to 5348e27 Compare July 13, 2023 19:40
@narategithub
Copy link
Collaborator

@tom95858 I have a couple patches on top of this in repo git@github.com:narategithub/ovis branch '1230-fix' that addressed the 4.3.3 compatibility test issue experienced in this pull request.

@tom95858
Copy link
Collaborator Author

tom95858 commented Jul 14, 2023 via email

@tom95858
Copy link
Collaborator Author

tom95858 commented Jul 14, 2023 via email

@tom95858
Copy link
Collaborator Author

tom95858 commented Jul 14, 2023 via email

@narategithub
Copy link
Collaborator

@tom95858

For ldmsd-4 passive side, if I did not specify 'compat=1', ldmsd-4 rejected ldms_ls-4.3.3 -a munge. I was not sure if this was an intended feature, so I ran everything in compatibility mode to cover the cases of 'ldms_ls-4.3.3 to ldmsd-4 with munge'. I remembered vaguely that we need 'ldmsd-4 to ldmsd-4.3.3' and 'ldms_ls-4 to ldmsd-4.3.3' compatibility, but not really the 'ldms_ls-4.3.3 to ldmsd-4' compatibility. So, maybe we can get rid of 'ldms_ls-4.3.3 to ldmsd-4' tests? But again, maybe I am wrong.

Thanks,
Narate

@tom95858
Copy link
Collaborator Author

@narategithub that is correct, the original code would not support the old message unless compat=1 was specified, but then it occurred to me that this would disallow v4.3.3 apps to talk to later versions unless the later daemon specified the compat option ... which would require different ports: one for old clients, one for new.

The way it is intended now is that the newer plugin will accept either the old message or the new message.

But right now, it is still failing...

@tom95858
Copy link
Collaborator Author

Let me be more specific. The passive side will accept either the old or the new message format. The compat= option only applies to the active side.

The munge authentication message consists of the
local and remote addresses of the transport between
the two peers. This message presumes that both peers see
the same addresses (albeit swapped). This assumption is
false in many routed and NAT'd environments.

This change replaces the error with an informational message
so that administrators will be aware of this difference
and can make a determination whether or not this difference
is expected.
@tom95858 tom95858 merged commit 9973dd4 into OVIS-4 Jul 19, 2023
14 checks passed
@tom95858 tom95858 deleted the munge-fix branch August 9, 2023 18:20
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants