Received-SPF: pass (google.com: domain of linux-nfs+bounces-2450-linux.lists.archive=gmail.com@vger.kernel.org designates 147.75.199.223 as permitted sender) client-ip=147.75.199.223;
BCmilterd-Mark-Subject: no
BCmilterd-Errors: 
BCmilterd-Report: SA-HVU#DKIM_VALID_AU#0.00,SA-HVU#DKIM_VALID#0.00,SA-HVU#DKIM_SIGNED#0.00,SA-HVU#OURIPS#-35.00
Message-ID: <ac7386ee-cf66-4438-963d-4a0de6c7f9f9@esat.kuleuven.be>
Date: Sun, 24 Mar 2024 18:18:50 +0100
Precedence: bulk
MIME-Version: 1.0
User-Agent: Mozilla Thunderbird
Subject: Re: RPCSEC_GSS_KRB5_ENCTYPES backported to some older long-term
 kernels, but not 6.1?
To: Chuck Lever III <chuck.lever@oracle.com>
Cc: Linux NFS Mailing List <linux-nfs@vger.kernel.org>
References: <ff131330-9f1c-493c-bfe2-8732a2730bf9@esat.kuleuven.be>
 <F2ED9EC7-3A5E-41B2-B225-FBF28C99132A@oracle.com>
 <1be78aa6-f8b6-45c5-a800-7af07ad532ef@esat.kuleuven.be>
 <BFD2D512-3B22-4586-BEB5-FBB7CB47E13C@oracle.com>
Content-Language: en-US
From: Rik Theys <Rik.Theys@esat.kuleuven.be>
In-Reply-To: <BFD2D512-3B22-4586-BEB5-FBB7CB47E13C@oracle.com>
Content-Type: text/plain; charset=UTF-8; format=flowed
Content-Transfer-Encoding: 8bit

Hi,

On 3/22/24 20:06, Chuck Lever III wrote:
>
>> On Mar 22, 2024, at 5:53 AM, Rik Theys <Rik.Theys@esat.kuleuven.be> wrote:
>>
>> Hi,
>>
>> On 3/21/24 14:33, Chuck Lever III wrote:
>>
>>>> Looking at the net/sunrpc/Kconfig file, these entries don't exist yet in the 6.1 series, but according tohttps://www.kernelconfig.io/config_rpcsec_gss_krb5_enctypes_aes_sha2?q=&kernelversion=4.19.310&arch=x86  they do exist in some older long-term kernels?
>>>>
>>>> Looking at CONFIG_RPCSEC_GSS_KRB5_ENCTYPES_AES_SHA2, it seems it exists for 4.19.310, 5.4.272, 5.15.152, but not for 5.10.213 or 6.1.82.
>>>>
>>>> I assume it was backported to some older kernels, but not 6.1? Would it be possible to backport these config items to the 6.1 series?
>>> I don't understand why AES_SHA2 would have been backported to
>>> those earlier kernels in the first place. I'll have to look
>>> into it.
>> Thanks.
> I don't see those new enctypes in my copies of 6.1.82, 5.15.152,
> or 5.10.213, nor do I see those commits in the history of 5.4.y.
>
> Can you check again?

I came across this website where it indicated that the Kconfig option 
was available in those kernel versions:

https://www.kernelconfig.io/config_rpcsec_gss_krb5_enctypes_aes_sha2?q=&kernelversion=4.19.310&arch=x86

But I've now checked the actual source and it doesn't seem to be present 
in those versions.

Apologies, I should have checked the actual source first.

Regards,

Rik


-- 
Rik Theys
System Engineer
KU Leuven - Dept. Elektrotechniek (ESAT)
Kasteelpark Arenberg 10 bus 2440  - B-3001 Leuven-Heverlee
+32(0)16/32.11.07
----------------------------------------------------------------
<<Any errors in spelling, tact or fact are transmission errors>>