[Bugs] [Bug 1503423] New: server.allow-insecure should be visible in " gluster volume set help"

bugzilla at redhat.com bugzilla at redhat.com
Wed Oct 18 06:05:29 UTC 2017


https://bugzilla.redhat.com/show_bug.cgi?id=1503423

            Bug ID: 1503423
           Summary: server.allow-insecure should be visible in "gluster
                    volume set help"
           Product: GlusterFS
           Version: mainline
         Component: glusterd
          Keywords: ZStream
          Severity: medium
          Assignee: bugs at gluster.org
          Reporter: srakonde at redhat.com
                CC: bugs at gluster.org, lmohanty at redhat.com,
                    poelstra at redhat.com, rhs-bugs at redhat.com,
                    rwheeler at redhat.com, vbellur at redhat.com
        Depends On: 996511
            Blocks: 1284390



+++ This bug was initially created as a clone of Bug #996511 +++

Description of problem:

We are suggesting (documenting) customers to set "server.allow-insecure on" for
samba/smb share access from RHS servers. 

But if i list the help of  gluster volume set i.e. "gluster volume set help" it
is not there. 

However I can run the command successfully. Check the below commands and their
output

#gluster volume set server.allow-insecure on

[root at rhs21ISoTest samba]# gluster volume info

Volume Name: gfs-vol1
Type: Distribute
Volume ID: 887dc3fe-5f93-4d45-85c9-91a714114de2
Status: Started
Number of Bricks: 2
Transport-type: tcp
Bricks:
Brick1: 10.70.35.220:/bricks/gfs-vol1-b1
Brick2: 10.70.35.220:/bricks/gfs-vol1-b2
Options Reconfigured:
performance.stat-prefetch: off
server.allow-insecure: on

I checked the code found that the volume set option "server.allow-insecure" is
defined as "NO_DOC" type, which needs to be changed to fix the issue.

xlators/mgmt/glusterd/src/glusterd-volume-set.c

 { .key         = "server.allow-insecure",
          .voltype     = "protocol/server",
          .option      = "rpc-auth-allow-insecure",
          .type        = NO_DOC,
          .op_version  = 1
        },


Version-Release number of selected component (if applicable):

glusterfs-server-3.4.0.17rhs-1.el6rhs.x86_64

How reproducible:
always

Steps to Reproduce:
1. run gluster volume set help
2. check if help for "server.allow-insecure " is present


Actual results:

"server.allow-insecure " is not present in "gluster volume set help"


Expected results:

"server.allow-insecure " should be present in "gluster volume set help"

Additional info:

--- Additional comment from Christopher R. Hertel on 2013-08-22 18:28:14 EDT
---

> We are suggesting (documenting) customers to set "server.allow-insecure on"
> for samba/smb share access from RHS servers.

This is more than a suggestion.  If the user does not enable
server.allow-insecure, Samba (via vfs_glusterfs and libgfapi) will run out of
available ports and fail to connect to the Gluster server daemon.  This will
cause the SMB clients to fail to connect to the server with only an error
message in the Samba logs.  See bug #981612.

This setting must be documented and available to users.

--- Additional comment from Vivek Agarwal on 2015-12-03 12:23:20 EST ---

Thank you for submitting this issue for consideration in Red Hat Gluster
Storage. The release for which you requested us to review, is now End of Life.
Please See https://access.redhat.com/support/policy/updates/rhs/

If you can reproduce this bug against a currently maintained version of Red Hat
Gluster Storage, please feel free to file a new report against the current
release.


Referenced Bugs:

https://bugzilla.redhat.com/show_bug.cgi?id=996511
[Bug 996511] server.allow-insecure should be visible in "gluster volume set
help"
https://bugzilla.redhat.com/show_bug.cgi?id=1284390
[Bug 1284390] server.allow-insecure should be visible in "gluster volume
set help"
-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.


More information about the Bugs mailing list