diff options
| author | Jeff Darcy <jdarcy@redhat.com> | 2014-04-17 23:21:05 +0000 |
|---|---|---|
| committer | Vijay Bellur <vbellur@redhat.com> | 2014-07-02 02:47:05 -0700 |
| commit | caa8a4ea50734378e7e19f70b39a837c58e9d229 (patch) | |
| tree | a06a99e143a1dd8c99cc10e84e9d3bca72a63cf7 /xlators/mgmt/glusterd/src/glusterd-volume-set.c | |
| parent | 831efecf927788f26b630cb82d5d6ff4af411a3d (diff) | |
rpc/auth: allow SSL identity to be used for authorization
Access to a volume is now controlled by the following options, based on
whether SSL is enabled or not.
* server.ssl-allow: get identity from certificate, no password needed
* auth.allow: get identity and matching password from command line
It is not possible to allow both simultaneously, since the connection
itself is either using SSL or it isn't.
Change-Id: I5a5be66520f56778563d62f4b3ab35c66cc41ac0
BUG: 1114604
Signed-off-by: Jeff Darcy <jdarcy@redhat.com>
Reviewed-on: http://review.gluster.org/3695
Tested-by: Gluster Build System <jenkins@build.gluster.com>
Reviewed-by: Vijay Bellur <vbellur@redhat.com>
Diffstat (limited to 'xlators/mgmt/glusterd/src/glusterd-volume-set.c')
| -rw-r--r-- | xlators/mgmt/glusterd/src/glusterd-volume-set.c | 6 |
1 files changed, 6 insertions, 0 deletions
diff --git a/xlators/mgmt/glusterd/src/glusterd-volume-set.c b/xlators/mgmt/glusterd/src/glusterd-volume-set.c index b1d3fe54f88..4a0a50dfe66 100644 --- a/xlators/mgmt/glusterd/src/glusterd-volume-set.c +++ b/xlators/mgmt/glusterd/src/glusterd-volume-set.c @@ -950,6 +950,12 @@ struct volopt_map_entry glusterd_volopt_map[] = { .type = NO_DOC, .op_version = 2 }, + { .key = "auth.ssl-allow", + .voltype = "protocol/server", + .option = "!ssl-allow", + .type = NO_DOC, + .op_version = GD_OP_VERSION_3_6_0, + }, { .key = "server.manage-gids", .voltype = "protocol/server", .op_version = GD_OP_VERSION_3_6_0, |