[Bugs] [Bug 1271065] [RFE] Render all mounts of a volume defunct upon access revocation

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1271065



--- Comment #2 from Vijay Bellur <vbellur at redhat.com> ---
COMMIT: http://review.gluster.org/12343 committed in release-3.7 by Raghavendra
G (rgowdapp at redhat.com) 
------
commit b8ba012da0cf276329025e30b36f43624548f7f1
Author: Prasanna Kumar Kalever <prasanna.kalever at redhat.com>
Date:   Fri Aug 21 00:08:23 2015 +0530

    server/protocol: option for dynamic authorization of client permissions

    problem:
    assuming gluster volume is already mounted (for gfapi: say client transport
    connection has already established), now if somebody change the volume
    permissions say *.allow | *.reject for a client, gluster should
allow/terminate
    the client connection based on the fresh set of volume options immediately,
    but in existing scenario neither we have any option to set this behaviour
nor
    we take any action until and unless we remount the volume manually

    solution:
    Introduce 'dynamic-auth' option (default: on).
    If 'dynamic-auth' is 'on' gluster will perform dynamic authentication to
    allow/terminate client transport connection immediately in response to
    *.allow | *.reject volume set options, thus if volume permissions have
changed
    for a particular client (say client is added to auth.reject list), his
    transport connection to gluster volume will be terminated immediately.

    Backport of:
    > Change-Id: I6243a6db41bf1e0babbf050a8e4f8620732e00d8
    > BUG: 1245380
    > Signed-off-by: Prasanna Kumar Kalever <prasanna.kalever at redhat.com>
    > Reviewed-on: http://review.gluster.org/12229
    > Tested-by: NetBSD Build System <jenkins at build.gluster.org>
    > Reviewed-by: Raghavendra G <rgowdapp at redhat.com>
    > (cherry picked from commit 84e90b756566bc211535a8627ed16d4231110ade)

    Change-Id: If7e5c9be912412ea388391ef406ee2c8bedb26b8
    BUG: 1271065
    Signed-off-by: Prasanna Kumar Kalever <prasanna.kalever at redhat.com>
    Reviewed-on: http://review.gluster.org/12343
    Tested-by: NetBSD Build System <jenkins at build.gluster.org>
    Tested-by: Gluster Build System <jenkins at build.gluster.com>
    Reviewed-by: Raghavendra G <rgowdapp at redhat.com>

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.