RepoMirrors/ceph
1
0
Fork 0
mirror of https://github.com/ceph/ceph synced 2025-02-17 16:07:37 +00:00
Code Issues Packages Projects Releases Wiki Activity

doc:cephx_protocol

Browse Source 
The goal of phase II is to provide C with a session key and ticekt
allowing it to communicate with S

Signed-off-by: Zhao Junwang <zhjwpku@gmail.com>
This commit is contained in:
Zhao Junwang 2016-06-19 18:03:43 -04:00
parent 8425df0d92
commit b302eaf451
1 changed files with 2 additions and 2 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

4
doc/dev/cephx_protocol.rst
View File

@ -187,7 +187,7 @@ Phase II
--------
This phase starts when C receives the message from A containing a new ticket and session key.
The goal of this phase is to provide A with a session key and ticket allowing it to
The goal of this phase is to provide C with a session key and ticket allowing it to
communicate with S.
The message A sent to C is dispatched to ``build_request()`` in ``CephxClientHandler.cc``,
@ -237,7 +237,7 @@ this message. Use that session key to decrypt the rest of the message.
Create a ``CephXAuthorizeReply`` to hold our reply. Extract the nonce (which was in the stuff
we just decrypted), add 1 to it, and put the result in the reply. Encrypt the reply and
put it in the buffer provided in the call to ``cephx_verify_authorizer()`` and return
to ``handle`_request()``. This will be used to prove to C that A (rather than an attacker)
to ``handle_request()``. This will be used to prove to C that A (rather than an attacker)
created this response.
Having verified that the message is valid and from C, now we need to build it a ticket for S.