Bug 771018

Summary:	ricci uses 'root' for pushing cluster.conf rather than 'ricci' user
Product:	[Fedora] Fedora	Reporter:	Madison Kelly <mkelly>
Component:	ricci	Assignee:	Chris Feist <cfeist>
Status:	CLOSED NOTABUG	QA Contact:	Fedora Extras Quality Assurance <extras-qa>
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	16	CC:	cfeist, fdinitto, jpokorny, rmccabe
Target Milestone:	---
Target Release:	---
Hardware:	x86_64
OS:	Unspecified
Whiteboard:
Fixed In Version:		Doc Type:	Bug Fix
Doc Text:		Story Points:	---
Clone Of:		Environment:
Last Closed:	2012-01-02 21:08:24 UTC	Type:	---
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:

Description Madison Kelly 2011-12-31 07:34:37 UTC

Description of problem:

Under RHEL6, 'cman_tool version -r' uses the 'ricci' user to push an updated 'cluster.conf' file, which I understand is the desired behaviour. However, under Fedora 16, ricci uses the 'root' user.

Version-Release number of selected component (if applicable):

ricci.x86_64                             0.18.7-1.fc15                  @fedora/15

How reproducible:

100%

Steps to Reproduce:
1. Create/start a cluster
2. Change 'cluster.conf' and push with 'cman_tool version -r'
3. Observe being prompted for the nodes' 'root' user password.
  
Actual results:

uses root

Expected results:

should use ricci

Additional info:

Comment 1 Jan Pokorný [poki] 2012-01-02 17:15:26 UTC

The particular user (ricci on RHEL since 6.1 and root on older version and
Fedora) is used for any authentication against ricci.  Beside mentioned
cman_tool, it this the case, e.g., when contacting ricci from luci interface
for the first time (creating/adding cluster) -- it's always that particular
user implicitly used in the authentication process.

The change in RHEL took place in connection with bug 644047.

We can consider this also for Fedora, however bug description does not
provide the motivation/rationale behind marking this as a bug/RFE.

Comment 2 Madison Kelly 2012-01-02 18:19:32 UTC

Beyond the rational from 644047, I would also argue that consistency is important. I would expect that it is pretty common for users with production RHEL 6 clusters to test/experiment coming changes on Fedora. Speaking from personal experience, I've found myself entering the wrong password when I try to authenticate the first time when I switch between production RHEL6 and test/dev Fedora.

For what it might be worth, I don't use luci or other tools (which may abstract away some of the differences).

Comment 3 Chris Feist 2012-01-02 21:08:24 UTC

Ricci won't be in F17 and I don't think it's appropriate to make a significant change in behavior in the middle of a release (and it works just like it has in every other release of ricci).  Closing this bz as NOTABUG.