<!-- 
RSS generated by JIRA (9.4.14#940014-sha1:734e6822bbf0d45eff9af51f82432957f73aa32c) at Sat Feb 10 02:20:39 UTC 2024

It is possible to restrict the fields that are returned in this document by specifying the 'field' parameter in your request.
For example, to request only the issue key and summary append 'field=key&field=summary' to the URL of your request.
-->
<rss version="0.92" >
<channel>
    <title>Whamcloud Community JIRA</title>
    <link>https://jira.whamcloud.com</link>
    <description>This file is an XML representation of an issue</description>
    <language>en-us</language>    <build-info>
        <version>9.4.14</version>
        <build-number>940014</build-number>
        <build-date>05-12-2023</build-date>
    </build-info>


<item>
            <title>[LU-8799] User cannot access directories created by user</title>
                <link>https://jira.whamcloud.com/browse/LU-8799</link>
                <project id="10000" key="LU">Lustre</project>
                    <description>&lt;p&gt;All files on soak are created by userid &apos;soaktest&apos;&lt;br/&gt;
Sequence of failures: &lt;br/&gt;
Mdtest started on 5 clients, job output:&lt;/p&gt;
&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;mkdir: cannot create directory `/mnt/soaked/soaktest/test/mdtestfpp/670897&apos;: File exists
unable to open &lt;span class=&quot;code-quote&quot;&gt;&apos;/mnt/soaked/soaktest/test/mdtestfpp/670897&apos;&lt;/span&gt;: Permission denied (13)
error: setstripe: create file &lt;span class=&quot;code-quote&quot;&gt;&apos;/mnt/soaked/soaktest/test/mdtestfpp/670897&apos;&lt;/span&gt; failed: Permission denied
error opening /mnt/soaked/soaktest/test/mdtestfpp/670897: Permission denied (13)
llapi_semantic_traverse: Failed to open &lt;span class=&quot;code-quote&quot;&gt;&apos;/mnt/soaked/soaktest/test/mdtestfpp/670897&apos;&lt;/span&gt;: Permission denied (13)
error: getstripe failed &lt;span class=&quot;code-keyword&quot;&gt;for&lt;/span&gt; /mnt/soaked/soaktest/test/mdtestfpp/670897.
error opening /mnt/soaked/soaktest/test/mdtestfpp/670897: Permission denied (13)
llapi_semantic_traverse: Failed to open &lt;span class=&quot;code-quote&quot;&gt;&apos;/mnt/soaked/soaktest/test/mdtestfpp/670897&apos;&lt;/span&gt;: Permission denied (13)
error: getdirstripe failed &lt;span class=&quot;code-keyword&quot;&gt;for&lt;/span&gt; /mnt/soaked/soaktest/test/mdtestfpp/670897.
error opening /mnt/soaked/soaktest/test/mdtestfpp/670897: Permission denied (13)
llapi_semantic_traverse: Failed to open &lt;span class=&quot;code-quote&quot;&gt;&apos;/mnt/soaked/soaktest/test/mdtestfpp/670897&apos;&lt;/span&gt;: Permission denied (13)
error: getdirstripe failed &lt;span class=&quot;code-keyword&quot;&gt;for&lt;/span&gt; /mnt/soaked/soaktest/test/mdtestfpp/670897.
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;
&lt;p&gt;attempting to do an &apos;ls&apos; of the directory as user &apos;soak test&apos;&lt;/p&gt;
&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;[soaktest@lola-17 ~]$ ls -l /mnt/soaked/soaktest/test/mdtestfpp/
ls: cannot access /mnt/soaked/soaktest/test/mdtestfpp/670766: Permission denied
ls: cannot access /mnt/soaked/soaktest/test/mdtestfpp/670897: Permission denied
ls: cannot access /mnt/soaked/soaktest/test/mdtestfpp/670917: Permission denied
ls: cannot access /mnt/soaked/soaktest/test/mdtestfpp/670877: Permission denied
ls: cannot access /mnt/soaked/soaktest/test/mdtestfpp/670845: Permission denied
ls: cannot access /mnt/soaked/soaktest/test/mdtestfpp/670674: Permission denied
ls: cannot access /mnt/soaked/soaktest/test/mdtestfpp/670905: Permission denied
ls: cannot access /mnt/soaked/soaktest/test/mdtestfpp/670894: Permission denied
total 20
drwxr-xr-x 3 soaktest soaktest 8192 Nov  3 12:24 670670
d????????? ? ?        ?           ?            ? 670674
drwxr-xr-x 3 soaktest soaktest 4096 Nov  3 12:26 670729
drwxr-xr-x 3 soaktest soaktest 4096 Nov  3 12:26 670731
drwxr-xr-x 3 soaktest soaktest 4096 Nov  3 12:26 670749
d????????? ? ?        ?           ?            ? 670766
d????????? ? ?        ?           ?            ? 670845
d????????? ? ?        ?           ?            ? 670877
d????????? ? ?        ?           ?            ? 670894
d????????? ? ?        ?           ?            ? 670897
d????????? ? ?        ?           ?            ? 670905
d????????? ? ?        ?           ?            ? 670917
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;</description>
                <environment>Soak, version=lustre: 2.8.59_79_gb8811a0</environment>
        <key id="41293">LU-8799</key>
            <summary>User cannot access directories created by user</summary>
                <type id="1" iconUrl="https://jira.whamcloud.com/secure/viewavatar?size=xsmall&amp;avatarId=11303&amp;avatarType=issuetype">Bug</type>
                                            <priority id="1" iconUrl="https://jira.whamcloud.com/images/icons/priorities/blocker.svg">Blocker</priority>
                        <status id="5" iconUrl="https://jira.whamcloud.com/images/icons/statuses/resolved.png" description="A resolution has been taken, and it is awaiting verification by reporter. From here issues are either reopened, or are closed.">Resolved</status>
                    <statusCategory id="3" key="done" colorName="success"/>
                                    <resolution id="1">Fixed</resolution>
                                        <assignee username="green">Oleg Drokin</assignee>
                                    <reporter username="cliffw">Cliff White</reporter>
                        <labels>
                            <label>soak</label>
                    </labels>
                <created>Thu, 3 Nov 2016 19:58:05 +0000</created>
                <updated>Fri, 4 Nov 2016 21:45:27 +0000</updated>
                            <resolved>Fri, 4 Nov 2016 21:45:27 +0000</resolved>
                                    <version>Lustre 2.9.0</version>
                                                        <due></due>
                            <votes>0</votes>
                                    <watches>8</watches>
                                                                            <comments>
                            <comment id="172235" author="cliffw" created="Thu, 3 Nov 2016 20:18:23 +0000"  >&lt;p&gt;Client side errors:&lt;/p&gt;
&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;lola-17.log:Nov  3 12:43:17 lola-17 kernel: LustreError: 56983:0:(llite_lib.c:2300:ll_prep_inode()) new_inode -fatal: rc -13
lola-17.log:Nov  3 12:43:17 lola-17 kernel: LustreError: 56983:0:(llite_lib.c:2300:ll_prep_inode()) Skipped 47 previous similar messages
lola-19.log:Nov  3 12:43:17 lola-19 kernel: LustreError: 25964:0:(llite_lib.c:2300:ll_prep_inode()) new_inode -fatal: rc -13
lola-19.log:Nov  3 12:43:17 lola-19 kernel: LustreError: 25964:0:(llite_lib.c:2300:ll_prep_inode()) Skipped 1 previous similar message
lola-25.log:Nov  3 12:43:19 lola-25 kernel: LustreError: 6420:0:(llite_lib.c:2300:ll_prep_inode()) new_inode -fatal: rc -13
lola-25.log:Nov  3 12:43:19 lola-25 kernel: LustreError: 6420:0:(llite_lib.c:2300:ll_prep_inode()) Skipped 3 previous similar messages
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;</comment>
                            <comment id="172262" author="cliffw" created="Fri, 4 Nov 2016 03:04:19 +0000"  >&lt;p&gt;During the test period (short) &lt;br/&gt;
213 tests ran without errors, created directories/files correctly.&lt;br/&gt;
51 tests failed. with the above errors.&lt;/p&gt;</comment>
                            <comment id="172371" author="cliffw" created="Fri, 4 Nov 2016 17:21:30 +0000"  >&lt;p&gt;The error is also oddly transient.&lt;br/&gt;
ls -l as soak test from a single client will fail repeatedly with permission errors, then will work. &lt;/p&gt;</comment>
                            <comment id="172380" author="di.wang" created="Fri, 4 Nov 2016 17:51:27 +0000"  >&lt;p&gt;And also for some failed directories, once we change to &quot;root&quot;, it will work again. And also it seems all of &quot;-13&quot; failures on MDS comes from permission check. I wonder if this is related with those patches from &lt;a href=&quot;https://jira.whamcloud.com/browse/LU-3289&quot; title=&quot;IU Shared Secret Key authentication and encryption&quot; class=&quot;issue-link&quot; data-issue-key=&quot;LU-3289&quot;&gt;&lt;del&gt;LU-3289&lt;/del&gt;&lt;/a&gt;? Could some security experts to have a look? &lt;/p&gt;</comment>
                            <comment id="172393" author="green" created="Fri, 4 Nov 2016 19:06:58 +0000"  >&lt;p&gt;The problem is a configuration issue.&lt;/p&gt;

&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;[root@lola-11 ~]# id soaktest
id: soaktest: No such user
...
[root@lola-9 ~]# id soaktest
uid=539(soaktest) gid=539(soaktest) groups=539(soaktest)
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;

&lt;p&gt;So basically every time you try to acess this &quot;unknownuser-owned&quot; dir you get permission denied.&lt;/p&gt;</comment>
                            <comment id="172397" author="green" created="Fri, 4 Nov 2016 19:36:39 +0000"  >&lt;p&gt;there&apos;s the telltale stuff in /var/log/secure too (hinted by John to check there):&lt;/p&gt;
&lt;div class=&quot;code panel&quot; style=&quot;border-width: 1px;&quot;&gt;&lt;div class=&quot;codeContent panelContent&quot;&gt;
&lt;pre class=&quot;code-java&quot;&gt;Nov  4 11:20:11 lola-11 l_getidentity[9316]: no such user 539
Nov  4 11:20:11 lola-11 l_getidentity[9316]: partial write ret -1: Invalid argument
&lt;/pre&gt;
&lt;/div&gt;&lt;/div&gt;</comment>
                            <comment id="172401" author="cliffw" created="Fri, 4 Nov 2016 20:01:15 +0000"  >&lt;p&gt;Apparently when lola-11 was re-imaged, the users were not set up correctly. &lt;br/&gt;
Have filed DCO-6238, will address. &lt;/p&gt;</comment>
                            <comment id="172415" author="cliffw" created="Fri, 4 Nov 2016 21:45:14 +0000"  >&lt;p&gt;YP was not setup when lola-11 was re-installed, fixed&lt;/p&gt;</comment>
                            <comment id="172416" author="cliffw" created="Fri, 4 Nov 2016 21:45:27 +0000"  >&lt;p&gt;System issue - YPbind not setup &lt;/p&gt;</comment>
                    </comments>
                <issuelinks>
                            <issuelinktype id="10011">
                    <name>Related</name>
                                            <outwardlinks description="is related to ">
                                                        </outwardlinks>
                                                        </issuelinktype>
                    </issuelinks>
                <attachments>
                    </attachments>
                <subtasks>
                    </subtasks>
                <customfields>
                                                                                                                                                                                            <customfield id="customfield_10890" key="com.atlassian.jira.plugins.jira-development-integration-plugin:devsummary">
                        <customfieldname>Development</customfieldname>
                        <customfieldvalues>
                            
                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                        <customfield id="customfield_10390" key="com.pyxis.greenhopper.jira:gh-lexo-rank">
                        <customfieldname>Rank</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>1|hzyuen:</customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                <customfield id="customfield_10090" key="com.pyxis.greenhopper.jira:gh-global-rank">
                        <customfieldname>Rank (Obsolete)</customfieldname>
                        <customfieldvalues>
                            <customfieldvalue>9223372036854775807</customfieldvalue>
                        </customfieldvalues>
                    </customfield>
                                                                                            <customfield id="customfield_10060" key="com.atlassian.jira.plugin.system.customfieldtypes:select">
                        <customfieldname>Severity</customfieldname>
                        <customfieldvalues>
                                <customfieldvalue key="10022"><![CDATA[3]]></customfieldvalue>

                        </customfieldvalues>
                    </customfield>
                                                                                                                                                                                                                                                                                                                                                        </customfields>
    </item>
</channel>
</rss>