Bug 1022328

Summary:	Increase the auxillary group limit to 65536
Product:	[Red Hat Storage] Red Hat Gluster Storage	Reporter:	Shyamsundar <srangana>
Component:	glusterfs	Assignee:	Shyamsundar <srangana>
Status:	CLOSED ERRATA	QA Contact:	Sachidananda Urs <surs>
Severity:	high	Docs Contact:
Priority:	high
Version:	2.1	CC:	aavati, gluster-bugs, kparthas, psriniva, srangana, vagarwal, vbellur, vraman
Target Milestone:	---	Keywords:	ZStream
Target Release:	RHGS 2.1.2
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:
Fixed In Version:	glusterfs-3.4.0.44.1u2rhs	Doc Type:	Bug Fix
Doc Text:	Previously the auxiliary group limit was 128 and any group-permission-based file access operation was limited. If a user belonged to more than 128 groups then that information was lost and prevented access due to group permissions. With this update, file system object access failures do not occur due to group permissions up to 65536 auxiliary groups that the user is a part of.	Story Points:	---
Clone Of:	953694	Environment:
Last Closed:	2014-02-25 07:43:28 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:
Bug Blocks:	1021857

Description Shyamsundar 2013-10-23 05:01:39 UTC

This is a point commit (cherry picked) from the upstream code changes made for gfapi as a part of the bug #953694 this is cloned from.

This change makes downstream gfapi handle based changes (as tracked in bug #1021857) non-deviant from the upstream code base and hence is deemed as required downstream.

Impact:
- This change moves the aux groups support from 200 to 65536 in related paths that handle aux groups settings in frames (syncop copy/create frames, nfs create frames)

+++ This bug was initially created as a clone of Bug #953694 +++

--- Additional comment from Anand Avati on 2013-07-24 14:37:24 EDT ---

COMMIT: http://review.gluster.org/5111 committed in master by Vijay Bellur (vbellur) 
------
commit 7cfef511898ba2d555256e6d7f53bd97ed69e6e0
Author: Anand Avati <avati>
Date:   Thu May 2 23:36:01 2013 -0700

    core: increase the auxillary group limit to 65536
    
    Make the allocation of groups dynamic and increase the limit
    to 65536.
    
    Change-Id: I702364ff460e3a982e44ccbcb3e337cac9c2df51
    BUG: 953694
    Signed-off-by: Anand Avati <avati>
    Reviewed-on: http://review.gluster.org/5111
    Reviewed-by: Xavier Hernandez <xhernandez>
    Tested-by: Gluster Build System <jenkins.com>
    Reviewed-by: Vijay Bellur <vbellur>

Comment 2 Amar Tumballi 2013-11-20 09:34:56 UTC

This is a dependency bug for supporting NFS Ganesha using libgfapi FSAL

Comment 3 Sachidananda Urs 2013-12-18 09:55:58 UTC

Verified in the latest release code.

Comment 4 Pavithra 2014-01-07 07:33:17 UTC

Can you please verify the doc text for technical accuracy?

Comment 5 Shyamsundar 2014-01-07 07:41:14 UTC

Verified the doc text, looks good.

Comment 7 errata-xmlrpc 2014-02-25 07:43:28 UTC

Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHEA-2014-0208.html