<div dir="ltr">Do you want to maintain it and want to know more details? Do you know C programming?<br></div><div class="gmail_extra"><br><div class="gmail_quote">On Wed, May 24, 2017 at 1:58 PM, David Spisla <span dir="ltr"><<a href="mailto:david.spisla@iternity.com" target="_blank">david.spisla@iternity.com</a>></span> wrote:<br><blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div link="#0563C1" vlink="#954F72" lang="DE">
<div class="m_-7388538517859901528WordSection1">
<p class="MsoNormal">Hello Gluster-Devels,<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I am interested in the crypt translator of glusterfs. Kaushal M told me that there is no maintainer at the moment. Does anybody of you know some technical details about that translator?<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Today there is still no support for NFS Mounts. Is there a way to enable crypt translator for nfs mounts?<u></u><u></u></p>
<p class="MsoNormal">Edward Shishkin wrote (<a href="http://lists.gluster.org/pipermail/gluster-users.old/2014-August/018369.html" target="_blank">http://lists.gluster.org/<wbr>pipermail/gluster-users.old/<wbr>2014-August/018369.html</a>):<u></u><u></u></p>
<p class="MsoNormal"><i>In NFS mounts of GlusterFS volumes file operations usually don't have<u></u><u></u></i></p>
<p class="MsoNormal"><i>file names. They manipulate with file handles instead (which actually<u></u><u></u></i></p>
<p class="MsoNormal"><i>are GFIDs). Respectively, we have to be sure that every file handle<u></u><u></u></i></p>
<p class="MsoNormal"><i>in the cache of the client machine is trusted. This is not simple to<u></u><u></u></i></p>
<p class="MsoNormal"><i>implement with a guarantee that future changes in GlusterFS code won't<u></u><u></u></i></p>
<p class="MsoNormal"><i>add a security hole, which will lead to appearing of non-verified file<u></u><u></u></i></p>
<p class="MsoNormal"><i>handles in the cache of the client machine.<u></u><u></u></i></p>
<p class="MsoNormal"><i><u></u> <u></u></i></p>
<p class="MsoNormal">This seems to be only a security issue. As far as I know enabling crypt translator for nfs mounts<u></u><u></u></p>
<p class="MsoNormal">should be not a technical problem (but you have still that security issue with the untrusted gfid)<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">I really wondering myself about that translator. Yesterday it was not working with nfs but today it does HaHaHa<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal">Regards<u></u><u></u></p>
<p class="MsoNormal"><u></u> <u></u></p>
<p class="MsoNormal"><b><span style="font-size:10.0pt;font-family:"Arial",sans-serif">David Spisla</span></b><span><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:9.0pt;font-family:"Arial",sans-serif;color:#91b700">Software Developer
</span><span><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial",sans-serif" lang="EN-US"><a href="mailto:david.spisla@iternity.com" target="_blank"><span style="color:blue">david.spisla@iternity.com</span></a>
</span><span><u></u><u></u></span></p>
<p class="MsoNormal" style="margin-bottom:12.0pt"><span style="font-size:8.0pt;font-family:"Arial",sans-serif" lang="EN-US"><a href="http://www.iternity.com/" target="_blank"><span style="color:#0563c1">www.iTernity.com</span></a></span><span><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif">Tel: +49 761-590 34 841</span><span><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif" lang="EN-US">Visit us at Booth #257 at:</span><span><u></u><u></u></span></p>
<p class="MsoNormal"><a href="https://www.hpe.com/events/discover/" target="_blank"><span style="font-family:"Arial",sans-serif;color:windowtext;text-decoration:none"><img style="width:4.7333in;height:1.4833in" id="m_-7388538517859901528Bild_x0020_1" src="cid:image003.png@01D2D478.6B381FD0" alt="cid:image001.gif@01D2CEE0.ADC8CD60" width="454" height="142" border="0"></span></a><span style="font-family:"Arial",sans-serif"><u></u><u></u></span></p>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"Arial",sans-serif" lang="EN-US">iTernity
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif">GmbH<br>
Heinrich-von-Stephan-Str. 21</span><span style="font-family:"Arial",sans-serif"><br>
</span><span style="font-size:10.0pt;font-family:"Arial",sans-serif">79100 Freiburg – Germany
<br>
---<br>
unseren technischen Support erreichen Sie unter +49 761-387 36 66<br>
---<span style="color:black"><u></u><u></u></span></span></p>
<p class="MsoNormal"><span style="font-size:8.0pt;font-family:"Arial",sans-serif">Geschäftsführer: Ralf Steinemann<br>
Eingetragen beim Amtsgericht Freiburg: HRB-Nr. <span style="letter-spacing:.15pt">
701332</span><br>
USt.Id de-24266431</span><span><u></u><u></u></span></p>
<p class="MsoNormal"><u></u> <u></u></p>
</div>
</div>
<br>______________________________<wbr>_________________<br>
Gluster-devel mailing list<br>
<a href="mailto:Gluster-devel@gluster.org">Gluster-devel@gluster.org</a><br>
<a href="http://lists.gluster.org/mailman/listinfo/gluster-devel" rel="noreferrer" target="_blank">http://lists.gluster.org/<wbr>mailman/listinfo/gluster-devel</a><br></blockquote></div><br><br clear="all"><br>-- <br><div class="gmail_signature" data-smartmail="gmail_signature"><div dir="ltr">Pranith<br></div></div>
</div>