[Bugs] [Bug 1787086] New: All ACLs permission denied

bugzilla at redhat.com bugzilla at redhat.com
Mon Dec 30 21:59:06 UTC 2019


https://bugzilla.redhat.com/show_bug.cgi?id=1787086

            Bug ID: 1787086
           Summary: All ACLs permission denied
           Product: GlusterFS
           Version: 7
          Hardware: armv7l
                OS: Linux
            Status: NEW
         Component: access-control
          Assignee: bugs at gluster.org
          Reporter: jmilette at protonmail.com
                CC: bugs at gluster.org
  Target Milestone: ---
    Classification: Community



Description of problem:


ACLs appear to always return permission denied:


jmilette at cube:~/mnt$ getfacl test
# file: test
# owner: gdm
# group: gdm
user::rwx
user:jmilette:rwx
group::r-x
mask::rwx
other::r-x

jmilette at cube:~/mnt$ ls test
ls: cannot open directory 'test': Permission denied


Glusterfs brick log from mount:


[2019-12-30 21:46:37.187382] I [addr.c:54:compare_addr_and_update]
0-/export/test: allowed = "*", received addr = "192.168.1.14"
[2019-12-30 21:46:37.187428] I [MSGID: 115029]
[server-handshake.c:549:server_setvolume] 0-test-server: accepted client from
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0
(version: 7.1) with subvol /export/test 
[2019-12-30 21:46:37.190606] I [rpcsvc.c:866:rpcsvc_handle_rpc_call]
0-rpc-service: spawned a request handler thread for queue 0
[2019-12-30 21:46:37.193741] I [rpcsvc.c:866:rpcsvc_handle_rpc_call]
0-rpc-service: spawned a request handler thread for queue 1
[2019-12-30 21:46:41.231121] I [MSGID: 139001]
[posix-acl.c:262:posix_acl_log_permit_denied] 0-test-access-control: client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
gfid: 3b2b30ad-39d8-4078-9f14-c5fae262d89c,
req(uid:1000,gid:1000,perm:4,ngrps:10),
ctx(uid:0,gid:0,in-groups:0,perm:775,updated-fop:READDIRP,
acl:(tag:1,perm:7,id:458754)(tag:4,perm:5,id:1000)(tag:65535,perm:65535,id:4294967295)(tag:16,perm:7,id:4294967295)(tag:32,perm:5,id:4294967295)
[Permission denied]
[2019-12-30 21:46:41.231220] E [MSGID: 115056]
[server-rpc-fops_v2.c:686:server4_opendir_cbk] 0-test-server: 135: OPENDIR
/test (3b2b30ad-39d8-4078-9f14-c5fae262d89c), client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
error-xlator: test-access-control [Permission denied]
[2019-12-30 21:46:42.728556] I [MSGID: 139001]
[posix-acl.c:262:posix_acl_log_permit_denied] 0-test-access-control: client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
gfid: 3b2b30ad-39d8-4078-9f14-c5fae262d89c,
req(uid:1000,gid:1000,perm:4,ngrps:10),
ctx(uid:0,gid:0,in-groups:0,perm:775,updated-fop:LOOKUP,
acl:(tag:1,perm:7,id:458754)(tag:4,perm:5,id:1000)(tag:65535,perm:65535,id:4294967295)(tag:16,perm:7,id:4294967295)(tag:32,perm:5,id:4294967295)
[Permission denied]
[2019-12-30 21:46:42.728643] E [MSGID: 115056]
[server-rpc-fops_v2.c:686:server4_opendir_cbk] 0-test-server: 139: OPENDIR
/test (3b2b30ad-39d8-4078-9f14-c5fae262d89c), client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
error-xlator: test-access-control [Permission denied]
[2019-12-30 21:49:05.249906] I [MSGID: 139001]
[posix-acl.c:262:posix_acl_log_permit_denied] 0-test-access-control: client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
gfid: e41a0667-9fbc-4817-bfee-2461fe47a91f,
req(uid:1000,gid:1000,perm:1,ngrps:10),
ctx(uid:124,gid:129,in-groups:0,perm:775,updated-fop:READDIRP,
acl:(tag:1,perm:7,id:458754)(tag:4,perm:5,id:1000)(tag:65535,perm:65535,id:4294967295)(tag:16,perm:7,id:4294967295)(tag:32,perm:5,id:4294967295)
[Permission denied]
[2019-12-30 21:49:05.250030] E [MSGID: 115050]
[server-rpc-fops_v2.c:157:server4_lookup_cbk] 0-test-server: 277: LOOKUP
/test/test (e41a0667-9fbc-4817-bfee-2461fe47a91f/test), client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
error-xlator: test-access-control [Permission denied]
[2019-12-30 21:49:05.251190] E [MSGID: 115050]
[server-rpc-fops_v2.c:157:server4_lookup_cbk] 0-test-server: 278: LOOKUP
/test/test (e41a0667-9fbc-4817-bfee-2461fe47a91f/test), client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
error-xlator: test-access-control [Permission denied]
[2019-12-30 21:49:06.606280] I [MSGID: 139001]
[posix-acl.c:262:posix_acl_log_permit_denied] 0-test-access-control: client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
gfid: e41a0667-9fbc-4817-bfee-2461fe47a91f,
req(uid:1000,gid:1000,perm:4,ngrps:10),
ctx(uid:124,gid:129,in-groups:0,perm:775,updated-fop:READDIRP,
acl:(tag:1,perm:7,id:458754)(tag:4,perm:5,id:1000)(tag:65535,perm:65535,id:4294967295)(tag:16,perm:7,id:4294967295)(tag:32,perm:5,id:4294967295)
[Permission denied]
[2019-12-30 21:49:06.606370] E [MSGID: 115056]
[server-rpc-fops_v2.c:686:server4_opendir_cbk] 0-test-server: 280: OPENDIR
/test (e41a0667-9fbc-4817-bfee-2461fe47a91f), client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
error-xlator: test-access-control [Permission denied]
[2019-12-30 21:49:05.251142] I [MSGID: 139001]
[posix-acl.c:262:posix_acl_log_permit_denied] 0-test-access-control: client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
gfid: e41a0667-9fbc-4817-bfee-2461fe47a91f,
req(uid:1000,gid:1000,perm:1,ngrps:10),
ctx(uid:124,gid:129,in-groups:0,perm:775,updated-fop:READDIRP,
acl:(tag:1,perm:7,id:458754)(tag:4,perm:5,id:1000)(tag:65535,perm:65535,id:4294967295)(tag:16,perm:7,id:4294967295)(tag:32,perm:5,id:4294967295)
[Permission denied]
[2019-12-30 21:54:29.493617] I [MSGID: 139001]
[posix-acl.c:262:posix_acl_log_permit_denied] 0-test-access-control: client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
gfid: e41a0667-9fbc-4817-bfee-2461fe47a91f,
req(uid:1000,gid:1000,perm:4,ngrps:10),
ctx(uid:124,gid:129,in-groups:0,perm:775,updated-fop:LOOKUP,
acl:(tag:1,perm:7,id:458754)(tag:4,perm:5,id:1000)(tag:65535,perm:65535,id:4294967295)(tag:16,perm:7,id:4294967295)(tag:32,perm:5,id:4294967295)
[Permission denied]
[2019-12-30 21:54:29.493734] E [MSGID: 115056]
[server-rpc-fops_v2.c:686:server4_opendir_cbk] 0-test-server: 331: OPENDIR
/test (e41a0667-9fbc-4817-bfee-2461fe47a91f), client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
error-xlator: test-access-control [Permission denied]
[2019-12-30 21:54:32.824240] E [MSGID: 115056]
[server-rpc-fops_v2.c:686:server4_opendir_cbk] 0-test-server: 335: OPENDIR
/test (e41a0667-9fbc-4817-bfee-2461fe47a91f), client:
CTX_ID:f0028cce-382c-487b-85d9-2a1b3452661b-GRAPH_ID:0-PID:6198-HOST:cube-PC_NAME:test-client-0-RECON_NO:-0,
error-xlator: test-access-control [Permission denied]






Version-Release number of selected component (if applicable):

I've tested versions 4.1 all the way to 7.1, all are affected.  This breaks
Samba :(


How reproducible:

Always


Steps to Reproduce:
1.  Create folder/files on ARMv7l, set acls
2.  Attempt to access using above set acls
3.  Access denied

Actual results:

ACLs do not function, and always return "permission denied"

Expected results:

ACLs should function on armv7l

Additional info:

The exact hardware I am using are the ODROID-HC2 boards: 
https://ameridroid.com/products/odroid-hc2

-- 
You are receiving this mail because:
You are on the CC list for the bug.
You are the assignee for the bug.


More information about the Bugs mailing list