[Bugs] [Bug 1566891] New: Set ACL policy in distrubte online will be failed which do check ACL permission

bugzilla at redhat.com bugzilla at redhat.com
Fri Apr 13 07:14:27 UTC 2018


https://bugzilla.redhat.com/show_bug.cgi?id=1566891

            Bug ID: 1566891
           Summary: Set ACL policy in distrubte online will be failed
                    which do check ACL permission
           Product: GlusterFS
           Version: 3.12
         Component: access-control
          Assignee: bugs at gluster.org
          Reporter: george.lian at nokia.com
                CC: bugs at gluster.org



Description of problem:

set ACL policy online in client B, and do FOP in client A, most of FOP will be
failed while do ACL permission check.

Version-Release number of selected component (if applicable):


How reproducible:
setup glusterFS with replicated, I suppose distribte also exist same issue.
and 2 mount point in 2 node, 
glustefs mount point on node A we called it client A.
glustefs mount point on node B we called it client B

Steps to Reproduce:
Note: If not specify client B, the following action is all on client A.
1)    Mount a direcot /mnt/test on gluste volume test
2)    Create a userid with name acl_usr1 with id 1126, and gourp id 1125
3)    Make sure a directory not root directory be there, let’s say /mnt/test/a
4)    Clear acl set on /mnt/test/a
setfacl --remove-all /mnt/test/a
5)    Su acl_usr1 (user id is 1126)
6)    Cd /mnt/test/a will be failed. (it’s correct.)
7)    On client B , set acl policy 
setfacl -m "g:1125:rwx" /mnt/test/a
8)    On client A cd /mnt/test/a will be success. (it’s correct)
9)    mkdir 111 failed 
bash-4.4$ mkdir 111
mkdir: cannot create directory '111': Permission denied
10)    on client B do this operation again
root at ubuntu:/mnt/test/a# setfacl -m "g:1125:rwx" /mnt/test/a
root at ubuntu:/mnt/test/a# su acl_usr1
acl_usr1 at ubuntu:/mnt/test/a$ mkdir 111
mkdir on client B success!
11)    On client A repeat create directory 111,112
bash-4.4$ mkdir 111
mkdir: cannot create directory '111': File exists
bash-4.4$ mkdir 112
mkdir: cannot create directory '112': Permission denied



Actual results:
mkdir a new directory failed when ACL is set the right permission

Expected results:
mkdir a new directory SHALL be success when ACL is set the right permission


Additional info:

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.


More information about the Bugs mailing list