[Users] NFS sanlock fails on Fedora 19 - 3.3RC (was add NFS Domain fails)

This is a multi-part message in MIME format. ------=_NextPartTM-000-e6ef3858-c4c3-4def-adb8-8a79deabbd07 Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable Hello,=0A= =0A= after some further investigation I think I found the reason =0A= but do not know how to fix it best. On my Fedora 19 host=0A= sanlock is running as user sanlock (id 179). That user has =0A= no access to files created by user vdsm (id 36). See logs=0A= attached.=0A= =0A= The node installation was done the standard way through=0A= ovirt-engine 3.3. Maybe I missed some setp in the installation =0A= process but I would expect this to work out of the box.=0A= =0A= Can anyone tell me what the expected setup is. Should I file =0A= a bug for that?=0A= =0A= Markus=0A= =0A= [root@colovn1 etc]# ps -ef | grep sanlock=0A= sanlock 1125 1 0 10:19 ? 00:00:00 sanlock daemon -U sanlock -= G sanlock=0A= root 1126 1125 0 10:19 ? 00:00:00 sanlock daemon -U sanlock -= G sanlock=0A= root 1128 1 0 10:19 ? 00:00:00 wdmd -G sanlock=0A= root 2307 1401 0 10:39 pts/0 00:00:00 grep --color=3Dauto sanlock= =0A= =0A= strace -p 1125 -F =0A= ...=0A= 2094 mprotect(0x7fa020000000, 135168, PROT_READ|PROT_WRITE) =3D 0=0A= 2094 open("/rhev/data-center/mnt/10.10.30.251:_var_nas5_ovirt/4250f423-459= c-40da-9a0e-d5b6fe853b1b/dom_md/ids", O_RDWR|O_SYNC|O_DIRECT) =3D -1 EACCES= (Permission denied)=0A= 2094 gettid() =3D 2094=0A= ...=0A= =0A= [root@colovn1 etc]# cat /etc/sysconfig/sanlock=0A= # SANLOCKOPTS -- set the command line options for the sanlock daemon=0A= # See sanlock man page for full list of command line options.=0A= #=0A= # Include "-U sanlock -G sanlock" in the option string unless=0A= # also changing the SANLOCKUSER above.=0A= #=0A= # To disable use of watchdog via wdmd=0A= #SANLOCKOPTS=3D"-U sanlock -G sanlock -w 0"=0A= #=0A= # To disable use of watchdog via wdmd and disable high priority features=0A= #SANLOCKOPTS=3D"-U sanlock -G sanlock -w 0 -h 0"=0A= ------=_NextPartTM-000-e6ef3858-c4c3-4def-adb8-8a79deabbd07 Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt" **************************************************************************** Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. Über das Internet versandte E-Mails können unter fremden Namen erstellt oder manipuliert werden. Deshalb ist diese als E-Mail verschickte Nachricht keine rechtsverbindliche Willenserklärung. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln Vorstand: Kadir Akin Dr. Michael Höhnerbach Vorsitzender des Aufsichtsrates: Hans Kristian Langva Registergericht: Amtsgericht Köln Registernummer: HRB 52 497 This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. e-mails sent over the internet may have been written under a wrong name or been manipulated. That is why this message sent as an e-mail is not a legally binding declaration of intention. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln executive board: Kadir Akin Dr. Michael Höhnerbach President of the supervisory board: Hans Kristian Langva Registry office: district court Cologne Register number: HRB 52 497 **************************************************************************** ------=_NextPartTM-000-e6ef3858-c4c3-4def-adb8-8a79deabbd07--

This is a multi-part message in MIME format. ------=_NextPartTM-000-a89f3b8f-4943-4a25-bf94-cafef2409f2b Content-Type: text/plain; charset="us-ascii" Content-Transfer-Encoding: quoted-printable
Hello,=0A= =0A= after some further investigation I think I found the reason=0A= but do not know how to fix it best. On my Fedora 19 host=0A= sanlock is running as user sanlock (id 179). That user has=0A= no access to files created by user vdsm (id 36). See logs=0A= attached.=0A= =0A= The node installation was done the standard way through=0A= ovirt-engine 3.3. Maybe I missed some setp in the installation=0A= process but I would expect this to work out of the box.=0A= =0A= Can anyone tell me what the expected setup is. Should I file=0A= a bug for that?=0A= =0A= Markus=0A= =0A= [root@colovn1 etc]# ps -ef | grep sanlock=0A= sanlock 1125 1 0 10:19 ? 00:00:00 sanlock daemon -U sanlock= -G sanlock=0A= root 1126 1125 0 10:19 ? 00:00:00 sanlock daemon -U sanlock= -G sanlock=0A= root 1128 1 0 10:19 ? 00:00:00 wdmd -G sanlock=0A= root 2307 1401 0 10:39 pts/0 00:00:00 grep --color=3Dauto sanlo= ck=0A= =0A= strace -p 1125 -F=0A= ...=0A= 2094 mprotect(0x7fa020000000, 135168, PROT_READ|PROT_WRITE) =3D 0=0A= 2094 open("/rhev/data-center/mnt/10.10.30.251:_var_nas5_ovirt/4250f423-4= 59c-40da-9a0e-d5b6fe853b1b/dom_md/ids", O_RDWR|O_SYNC|O_DIRECT) =3D -1 EACC= ES (Permission denied)=0A= 2094 gettid() =3D 2094=0A= ...=0A= =0A= [root@colovn1 etc]# cat /etc/sysconfig/sanlock=0A= # SANLOCKOPTS -- set the command line options for the sanlock daemon=0A= # See sanlock man page for full list of command line options.=0A= #=0A= # Include "-U sanlock -G sanlock" in the option string unless=0A= # also changing the SANLOCKUSER above.=0A= #=0A= # To disable use of watchdog via wdmd=0A= #SANLOCKOPTS=3D"-U sanlock -G sanlock -w 0"=0A= #=0A= # To disable use of watchdog via wdmd and disable high priority features= =0A= #SANLOCKOPTS=3D"-U sanlock -G sanlock -w 0 -h 0"=0A= =0A= =0A= Too stupid. In case someone else faces this problem. The error=0A= comes from a missing "all_squash" parameter in /etc/exports=0A= =0A= Markus= ------=_NextPartTM-000-a89f3b8f-4943-4a25-bf94-cafef2409f2b Content-Type: text/plain; name="InterScan_Disclaimer.txt" Content-Transfer-Encoding: 7bit Content-Disposition: attachment; filename="InterScan_Disclaimer.txt"
**************************************************************************** Diese E-Mail enthält vertrauliche und/oder rechtlich geschützte Informationen. Wenn Sie nicht der richtige Adressat sind oder diese E-Mail irrtümlich erhalten haben, informieren Sie bitte sofort den Absender und vernichten Sie diese Mail. Das unerlaubte Kopieren sowie die unbefugte Weitergabe dieser Mail ist nicht gestattet. Über das Internet versandte E-Mails können unter fremden Namen erstellt oder manipuliert werden. Deshalb ist diese als E-Mail verschickte Nachricht keine rechtsverbindliche Willenserklärung. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln Vorstand: Kadir Akin Dr. Michael Höhnerbach Vorsitzender des Aufsichtsrates: Hans Kristian Langva Registergericht: Amtsgericht Köln Registernummer: HRB 52 497 This e-mail may contain confidential and/or privileged information. If you are not the intended recipient (or have received this e-mail in error) please notify the sender immediately and destroy this e-mail. Any unauthorized copying, disclosure or distribution of the material in this e-mail is strictly forbidden. e-mails sent over the internet may have been written under a wrong name or been manipulated. That is why this message sent as an e-mail is not a legally binding declaration of intention. Collogia Unternehmensberatung AG Ubierring 11 D-50678 Köln executive board: Kadir Akin Dr. Michael Höhnerbach President of the supervisory board: Hans Kristian Langva Registry office: district court Cologne Register number: HRB 52 497 **************************************************************************** ------=_NextPartTM-000-a89f3b8f-4943-4a25-bf94-cafef2409f2b--
participants (1)
-
Markus Stockhausen