[Bugs] [Bug 1566352] New: posix-acl not synchronized between glusterfs clients

[bugzilla at redhat.com]

https://bugzilla.redhat.com/show_bug.cgi?id=1566352

            Bug ID: 1566352
           Summary: posix-acl not synchronized between glusterfs clients
           Product: GlusterFS
           Version: 3.12
         Component: posix-acl
          Severity: high
          Assignee: bugs at gluster.org
          Reporter: zz.sh.cynthia at gmail.com
                CC: bugs at gluster.org



Description of problem:

I find that the acl on gluster volume root dir is not synchronized between
clients. This may cause potentially problems, when one glusterfs client setfacl
to volume root dir (E.g. /mnt/mstate), the other client does not has this acl
in its local buffer, but when it try to check it using getfacl command, it will
retrieve acl from glusterfs server side, so this client will get “very
confused”
Version-Release number of selected component (if applicable):

3.12.3
How reproducible:


Steps to Reproduce:
Before test 

on both mn-0 and mn-1 the acl for user _nokrcpsyshealthcheck is “r-x”
[root at mn-0:/root]
# getfacl /mnt/mstate
getfacl: Removing leading '/' from absolute path names
# file: mnt/mstate
# owner: root
# group: root
user::rwx
group::r-x
group:_nokrcpsyshealthcheck:r-x
mask::r-x
other::r-x 

step1
touch files under /mnt/mstate will fail with “Permission denied” on both
clients
[client mn-1]:
[_nokrcpsyshealthcheck at mn-1:/mnt/mstate]
$ touch test
touch: cannot touch 'test': Permission denied
[client mn-0]
[_nokrcpsyshealthcheck at mn-0:/root]
$ touch /mnt/mstate/test2
touch: cannot touch '/mnt/mstate/test2': Permission denied

Step2
client mn-1 setfacl -m g:736:rwx /mnt/mstate
[_nokrcpsyshealthcheck at mn-1:/mnt/mstate]
$ exit
exit
[root at mn-1:/mnt/log]
# setfacl -m g:736:rwx /mnt/mstate

Step3
     getfacl on both clients
    [_nokrcpsyshealthcheck at mn-1:/mnt/log]
$ getfacl /mnt/mstate
getfacl: Removing leading '/' from absolute path names
# file: mnt/mstate
# owner: root
# group: root
user::rwx
group::r-x
group:_nokrcpsyshealthcheck:rwx
mask::rwx
other::r-x

     [root at mn-0:/root]
# getfacl /mnt/mstate
getfacl: Removing leading '/' from absolute path names
# file: mnt/mstate
# owner: root
# group: root
user::rwx
group::r-x
group:_nokrcpsyshealthcheck:rwx
mask::rwx
other::r-x

step4
touch file in /mnt/mstate is ok on client mn-1 but still fail on client mn-0
[_nokrcpsyshealthcheck at mn-0:/root]
$ touch /mnt/mstate/test2
touch: cannot touch '/mnt/mstate/test2': Permission denied

[root at mn-1:/mnt/log]
# su _nokrcpsyshealthcheck
bash: /dev/null/.bashrc: Not a directory
[_nokrcpsyshealthcheck at mn-1:/mnt/log]
$ cd /mnt/mstate
[_nokrcpsyshealthcheck at mn-1:/mnt/mstate]
$ touch test
[_nokrcpsyshealthcheck at mn-1:/mnt/mstate]
$ ls
as-0  as-1  as-2  cp-0    cp-1  _global  mn-0  mn-1  sn-0  sn-1  sn-2  test


Actual results:

can not touch files under /mnt/mstate even for a long time
Expected results:
could touch files under /mnt/mstate very soon.

Additional info:
there is no such issue in non-volume-root dir.

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.