[LU-14797] lfs setquota should be nodemap aware

• Type: Bug
• Resolution: Fixed
• Priority: Minor
• Fix Version/s: Lustre 2.15.0
• Affects Version/s: Lustre 2.15.0
• Labels: nodemap patch sec
• Severity: 3
• Assignee: Sebastien Buisson
• Reporter: Sebastien Buisson

Description

When nodemap is used in conjunction with project quota to restrict clients to a given fileset, it should not be possible to alter other project quotas with lfs setquota.

Issue Links

• is related to: LUDOC-493 Update nodemap section to reflect recent changes

Comments

[Peter Jones]

Landed for 2.15

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/44119/
Subject: LU-14797 nodemap: map project id
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 0daeebcbdc4e89d59221299f2687cfd3c4f00b5b

[Gerrit Updater]

"Oleg Drokin <[e-mail]>" merged in patch https://review.whamcloud.com/44108/
Subject: LU-14797 sec: add projid to nodemap
Project: fs/lustre-release
Branch: master
Current Patch Set:
Commit: 8a770616a5ad21360ecba63c3643cadd245a2a50

[Gerrit Updater]

Sebastien Buisson ([e-mail]) uploaded a new patch: https://review.whamcloud.com/44119
Subject: LU-14797 nodemap: map project id
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 7e88416dcb6c99c40cc9f9e4f35a1b8c87f7132d

[Gerrit Updater]

Sebastien Buisson ([e-mail]) uploaded a new patch: https://review.whamcloud.com/44108
Subject: LU-14797 sec: add projid to nodemap
Project: fs/lustre-release
Branch: master
Current Patch Set: 1
Commit: 26742cff80aa1bc278e487623e00281f9c25cd3e

[Sebastien Buisson]

In order to address this requirement, we could add the ability to create id maps of a new type projid, in addition to the already existing uid and gid types. That would also require adding a new value to map_mode. Currently it only groks uid_only, gid_only or both, but we could add a projid_only value. Finally, a new property named squash_projid could be used to map all project ID to a default one.

The common case of one projid allowed per nodemap would consist in having a map that just has the projid mapped to itself, the map_mode to projid_only, and deny_unknown set to 1.