Bug 1271065
Summary: | [RFE] Render all mounts of a volume defunct upon access revocation | ||
---|---|---|---|
Product: | [Community] GlusterFS | Reporter: | Prasanna Kumar Kalever <prasanna.kalever> |
Component: | core | Assignee: | Prasanna Kumar Kalever <prasanna.kalever> |
Status: | CLOSED EOL | QA Contact: | |
Severity: | unspecified | Docs Contact: | |
Priority: | unspecified | ||
Version: | 3.7.6 | CC: | bugs, csaba, pkarampu, prasanna.kalever, rcyriac, rgowdapp, rtalur, sankarshan |
Target Milestone: | --- | Keywords: | Triaged |
Target Release: | --- | ||
Hardware: | Unspecified | ||
OS: | Unspecified | ||
Whiteboard: | |||
Fixed In Version: | Doc Type: | Bug Fix | |
Doc Text: | Story Points: | --- | |
Clone Of: | 1245380 | Environment: | |
Last Closed: | 2017-03-08 11:02:07 UTC | Type: | Bug |
Regression: | --- | Mount Type: | --- |
Documentation: | --- | CRM: | |
Verified Versions: | Category: | --- | |
oVirt Team: | --- | RHEL 7.3 requirements from Atomic Host: | |
Cloudforms Team: | --- | Target Upstream Version: | |
Embargoed: | |||
Bug Depends On: | 1245380 | ||
Bug Blocks: | 1265571, 1279240 |
Description
Prasanna Kumar Kalever
2015-10-13 05:59:58 UTC
REVIEW: http://review.gluster.org/12343 (server/protocol: option for dynamic authorization of client permissions) posted (#1) for review on release-3.7 by Prasanna Kumar Kalever (pkalever) COMMIT: http://review.gluster.org/12343 committed in release-3.7 by Raghavendra G (rgowdapp) ------ commit b8ba012da0cf276329025e30b36f43624548f7f1 Author: Prasanna Kumar Kalever <prasanna.kalever> Date: Fri Aug 21 00:08:23 2015 +0530 server/protocol: option for dynamic authorization of client permissions problem: assuming gluster volume is already mounted (for gfapi: say client transport connection has already established), now if somebody change the volume permissions say *.allow | *.reject for a client, gluster should allow/terminate the client connection based on the fresh set of volume options immediately, but in existing scenario neither we have any option to set this behaviour nor we take any action until and unless we remount the volume manually solution: Introduce 'dynamic-auth' option (default: on). If 'dynamic-auth' is 'on' gluster will perform dynamic authentication to allow/terminate client transport connection immediately in response to *.allow | *.reject volume set options, thus if volume permissions have changed for a particular client (say client is added to auth.reject list), his transport connection to gluster volume will be terminated immediately. Backport of: > Change-Id: I6243a6db41bf1e0babbf050a8e4f8620732e00d8 > BUG: 1245380 > Signed-off-by: Prasanna Kumar Kalever <prasanna.kalever> > Reviewed-on: http://review.gluster.org/12229 > Tested-by: NetBSD Build System <jenkins.org> > Reviewed-by: Raghavendra G <rgowdapp> > (cherry picked from commit 84e90b756566bc211535a8627ed16d4231110ade) Change-Id: If7e5c9be912412ea388391ef406ee2c8bedb26b8 BUG: 1271065 Signed-off-by: Prasanna Kumar Kalever <prasanna.kalever> Reviewed-on: http://review.gluster.org/12343 Tested-by: NetBSD Build System <jenkins.org> Tested-by: Gluster Build System <jenkins.com> Reviewed-by: Raghavendra G <rgowdapp> This bug could not be fixed in time for glusterfs-3.7.6. This is now being tracked for being fixed in glusterfs-3.7.7. landed in v3.7.10 This bug is getting closed because GlusteFS-3.7 has reached its end-of-life. Note: This bug is being closed using a script. No verification has been performed to check if it still exists on newer releases of GlusterFS. If this bug still exists in newer GlusterFS releases, please reopen this bug against the newer release. |