[Bugs] [Bug 1566891] New: Set ACL policy in distrubte online will be failed which do check ACL permission
bugzilla at redhat.com
bugzilla at redhat.com
Fri Apr 13 07:14:27 UTC 2018
https://bugzilla.redhat.com/show_bug.cgi?id=1566891
Bug ID: 1566891
Summary: Set ACL policy in distrubte online will be failed
which do check ACL permission
Product: GlusterFS
Version: 3.12
Component: access-control
Assignee: bugs at gluster.org
Reporter: george.lian at nokia.com
CC: bugs at gluster.org
Description of problem:
set ACL policy online in client B, and do FOP in client A, most of FOP will be
failed while do ACL permission check.
Version-Release number of selected component (if applicable):
How reproducible:
setup glusterFS with replicated, I suppose distribte also exist same issue.
and 2 mount point in 2 node,
glustefs mount point on node A we called it client A.
glustefs mount point on node B we called it client B
Steps to Reproduce:
Note: If not specify client B, the following action is all on client A.
1) Mount a direcot /mnt/test on gluste volume test
2) Create a userid with name acl_usr1 with id 1126, and gourp id 1125
3) Make sure a directory not root directory be there, let’s say /mnt/test/a
4) Clear acl set on /mnt/test/a
setfacl --remove-all /mnt/test/a
5) Su acl_usr1 (user id is 1126)
6) Cd /mnt/test/a will be failed. (it’s correct.)
7) On client B , set acl policy
setfacl -m "g:1125:rwx" /mnt/test/a
8) On client A cd /mnt/test/a will be success. (it’s correct)
9) mkdir 111 failed
bash-4.4$ mkdir 111
mkdir: cannot create directory '111': Permission denied
10) on client B do this operation again
root at ubuntu:/mnt/test/a# setfacl -m "g:1125:rwx" /mnt/test/a
root at ubuntu:/mnt/test/a# su acl_usr1
acl_usr1 at ubuntu:/mnt/test/a$ mkdir 111
mkdir on client B success!
11) On client A repeat create directory 111,112
bash-4.4$ mkdir 111
mkdir: cannot create directory '111': File exists
bash-4.4$ mkdir 112
mkdir: cannot create directory '112': Permission denied
Actual results:
mkdir a new directory failed when ACL is set the right permission
Expected results:
mkdir a new directory SHALL be success when ACL is set the right permission
Additional info:
--
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.
More information about the Bugs
mailing list