It doesn't look like this would be possible due to nodemap or SSK limitations. As you pointed out, nodemap must associate a NID with a single nodemap. SSK was intentionally tied to nodemap by design. It does a lookup on the nodemap of a NID to verify it matches what is found in the server key. I think even if you used multiple NIDs for a client like o2ib(ib0),o2ib1(ib0) you would still run into issues due to LNet, but I'm not certain on that.
Jeremy On Mon, Dec 30, 2019 at 9:30 PM Hans Henrik Happe <[email protected]> wrote: > Hi, > > Is it possible to have one client mount multiple fileset's with > different ssk keys. > > Basically, we would just like to hand out a key to clients that should > be allowed to mount a specific fileset (subdir). First, it looks like > the nodemap must contain the client NID for it to be able to mount. The > key is not enough. Secondly, nodemaps are not allowed hold the same > NIDs, so it seems impossible to have multiple ssk protected filesets > mounted from one client, unless multiple NIDs are used? > > Example: For nodes A and B and filesets f0 (key0) and f1 (key1). > > A: Should be allowed to mount f0 (key0). > B: Should be allowed to mount f0 (key0) and f1 (key1). > > Cheers, > Hans Henrik > _______________________________________________ > lustre-discuss mailing list > [email protected] > http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org >
_______________________________________________ lustre-discuss mailing list [email protected] http://lists.lustre.org/listinfo.cgi/lustre-discuss-lustre.org
