https://jira.whamcloud.com This file is an XML representation of an issue en-us 9.4.14 940014 05-12-2023 https://jira.whamcloud.com/browse/LU-5641 Lustre <p>Test 103a fails when the client node is running el7. some of the permissions subtests of 103a assume the user 'daemon' is a member of the group 'bin'. In a default install of el7 this isn't true. If I manually add 'daemon' as a member of the group 'bin' by editing the /etc/group file on the client node(s) for the test then test 103a passes 100%.</p> <p>I think it may be a TEI issue to ensure that the expected, assumed user/group setup is done on el7 test installs.</p> el7 LU-5641

sanity.sh test_103a "acl test" fails on el7

Bug Critical Resolved Fixed Bob Glossman Bob Glossman MB Thu, 18 Sep 2014 21:10:52 +0000 Tue, 7 Dec 2021 19:24:50 +0000 Mon, 12 Jan 2015 18:50:44 +0000 Lustre 2.7.0 Lustre 2.7.0 0 5 <p>It would be nice to have an actual error message in the bug to search for.</p> <p>errors seen:</p> <div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent"> <pre> . . . performing permissions... [12] $ id -u -- ok . . . [52] $ su daemon -- ok [53] $ cat f -- failed root ? cat: f: Permission denied bin ? ~ [57] $ echo daemon &gt;&gt; f -- ok . . . [173] $ setfacl -m g:bin:r,g:daemon:w f -- ok [175] $ su daemon -- ok [176] $ : &lt; f -- failed ~ ? f: Permission denied [177] $ : &gt; f -- ok [178] $ : &lt;&gt; f -- ok . . . [283] $ cd .. -- ok [284] $ rm -rf d -- ok 101 commands (99 passed, 2 failed) sanity test_103a: @@@@@@ FAIL: permissions failed Trace dump: = /usr/lib64/lustre/tests/test-framework.sh:4571:error_noexit() = /usr/lib64/lustre/tests/test-framework.sh:4602:error() = /usr/lib64/lustre/tests/sanity.sh:6874:test_103a() = /usr/lib64/lustre/tests/test-framework.sh:4849:run_one() = /usr/lib64/lustre/tests/test-framework.sh:4884:run_one_logged() = /usr/lib64/lustre/tests/test-framework.sh:4703:run_test() = /usr/lib64/lustre/tests/sanity.sh:6910:main() Dumping lctl log to /tmp/test_logs/2014-09-19/111136/sanity.test_103a.*.1411150356.log FAIL 103a (14s) resend_count is set to 4 4 resend_count is set to 4 4 resend_count is set to 4 4 resend_count is set to 4 4 resend_count is set to 4 4 == sanity test complete, duration 21 sec ============================================================= 11:12:38 (1411150358) sanity: FAIL: test_103a permissions failed </pre> </div></div> <p>The problem is that <tt>lustre/tests/acl/{misc,permission}.test</tt> expect that daemon is in the bin group, and that is not easily changed in the test itself (the requirements are described at the top of these files). On my RHEL6 <tt>/etc/group</tt> the system accounts look like:</p> <div class="preformatted panel" style="border-width: 1px;"><div class="preformattedContent panelContent"> <pre>bin:x:1:root,bin,daemon daemon:x:2:root,bin,daemon sys:x:3:root,bin,adm adm:x:4:root,adm,daemon </pre> </div></div> <p>It would be useful to see what the /etc/group file looks like for RHEL7, so that it might be possible to just replace "bin" and/or "daemon" in the expect output and it will continue to work for both RHEL6 and RHEL7 and SLES11.</p> <p>Probably the best option is to download the "acl" source RPM from RHEL7 to get an updated copy of the scripts and expect output from the "test" directory. It might be necessary to put this into a separate subdirectory (e.g. lustre/tests/acl-rhel7) but would probably improve our test coverage.</p> <p>yes, I said that was the problem in my initial description. by default in el7 /etc/group user 'daemon' is not a member of group 'bin'.</p> <p>There's another option. the cmd 'gpasswd -a daemon bin' can be used to add user 'daemon' to group 'bin' sometime before running the test. Doing so would meke the environment conform to the expectations of the test. This cmd is available everywhere, in all distros and versions that I have polled. It is safe to use as it appears to be a noop when 'daemon' is already a member of the group. The only problem I see is who does this and on what nodes. I had suggested something like this be done during provisioning of el7 nodes in the TEI framework. Seems comparable to operations they already do like adding extra user &amp; group entries into our test environment.</p> <p>proposed fix:<br/> <a href="http://review.whamcloud.com/12044" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/12044</a></p> <p>I looks like sanity.sh test_103a passed for RHEL 7 according to:<br/> <a href="https://testing.hpdd.intel.com/test_sets/bc4bc48a-4f69-11e4-9892-5254006e85c2" class="external-link" target="_blank" rel="nofollow noopener">https://testing.hpdd.intel.com/test_sets/bc4bc48a-4f69-11e4-9892-5254006e85c2</a></p> <p>need to reopen this to do more fixes for el7 server. the previous fix for this problem only fixed it for el7 clients.</p> <p>Bob Glossman (bob.glossman@intel.com) uploaded a new patch: <a href="http://review.whamcloud.com/12762" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/12762</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-5641" title="sanity.sh test_103a &quot;acl test&quot; fails on el7" class="issue-link" data-issue-key="LU-5641"><del>LU-5641</del></a> tests: ensure user daemon is in group bin on mds<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: 1<br/> Commit: bfcc1c2f167427688f645c1a26f0abe2d036a5eb</p> <p>additional fix for el7 servers:<br/> <a href="http://review.whamcloud.com/12762" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/12762</a></p> <p>Oleg Drokin (oleg.drokin@intel.com) merged in patch <a href="http://review.whamcloud.com/12762/" class="external-link" target="_blank" rel="nofollow noopener">http://review.whamcloud.com/12762/</a><br/> Subject: <a href="https://jira.whamcloud.com/browse/LU-5641" title="sanity.sh test_103a &quot;acl test&quot; fails on el7" class="issue-link" data-issue-key="LU-5641"><del>LU-5641</del></a> tests: ensure user daemon is in group bin on mds<br/> Project: fs/lustre-release<br/> Branch: master<br/> Current Patch Set: <br/> Commit: 31832fab6d6da74e627133139b0c59c1dc07e62c</p> <p>Patch landed to Master.</p> Related LU-5689 LU-15259 Development Rank 1|hzwwov: Rank (Obsolete) 15802 Severity