Re: [pve-devel] [PATCH v3 access-control/cluster/manager 0/5] auth key rotation

2019-03-15 Thread Fabian Grünbichler
On Thu, Mar 14, 2019 at 11:30:46AM +0100, Thomas Lamprecht wrote: > On 3/13/19 3:01 PM, Fabian Grünbichler wrote: > > changes since v2: > > - clean up error handling for calls to cfs_lock_authkey > > - disable rotation until PVE 6.0 > > - add posinst for smoother upgrading once rotation gets enable

Re: [pve-devel] [PATCH v3 access-control/cluster/manager 0/5] auth key rotation

2019-03-14 Thread Thomas Lamprecht
On 3/13/19 3:01 PM, Fabian Grünbichler wrote: > changes since v2: > - clean up error handling for calls to cfs_lock_authkey > - disable rotation until PVE 6.0 > - add posinst for smoother upgrading once rotation gets enabled > > changes since v1: > - add rotation in pvestatd > - accept tickets sig

[pve-devel] [PATCH v3 access-control/cluster/manager 0/5] auth key rotation

2019-03-13 Thread Fabian Grünbichler
changes since v2: - clean up error handling for calls to cfs_lock_authkey - disable rotation until PVE 6.0 - add posinst for smoother upgrading once rotation gets enabled changes since v1: - add rotation in pvestatd - accept tickets signed with current key if cluster is not quorate (no rotation p