[LU-19949] supplementary gid is not honored when identity_upcall is disabled

• Type: Bug
• Resolution: Duplicate
• Priority: Medium
• Severity: 3
• Assignee: Di Wang
• Reporter: Di Wang

Description

It looks like when MDS disable identity_upcall (identity_upcall=NONE), then MDS may ignore the supplementary gid. 

 

[root@lustre-client-1 tests]# groupadd -g 1025 tst_grp5
[root@lustre-client-1 tests]# groupadd -g 1026 tst_grp6
[root@lustre-client-1 tests]# groupadd -g 1027 tst_grp7

[root@lustre-client-1 tests]# useradd -u 1036 -g tst_grp5 tst_usr5
[root@lustre-client-1 tests]# useradd -u 1037 -g tst_grp6 tst_usr6
[root@lustre-client-1 tests]# useradd -u 1038 -g tst_grp7 tst_usr7
[root@lustre-client-1 tests]# mkdir /mnt/lustre/dir2
[root@lustre-client-1 tests]# chmod 700 /mnt/lustre/dir2
[root@lustre-client-1 tests]# setfacl -m g:tst_grp5:rwx /mnt/lustre/dir2
[root@lustre-client-1 tests]# getfacl /mnt/lustre/dir2
getfacl: Removing leading '/' from absolute path names
# file: mnt/lustre/dir2
# owner: root
# group: root
user::rwx
group::---
group:tst_grp5:rwx
mask::rwx
other::---
[root@lustre-client-1 tests]#  usermod -a -G tst_grp5 tst_usr7
[root@lustre-client-1 tests]# sudo su tst_usr7
[tst_usr7@lustre-client-1 tests]$ id tst_usr7
uid=1038(tst_usr7) gid=1027(tst_grp7) groups=1027(tst_grp7),1025(tst_grp5)
[tst_usr7@lustre-client-1 tests]$ touch /mnt/lustre/dir2
touch: setting times of '/mnt/lustre/dir2': Permission denied

 

 

Issue Links

• is related to: LU-18158 Hint client about supplementary groups and ACLs in case of file create