Bug 797922

Summary: corosync filling up /dev/shm
Product: Red Hat Enterprise Linux 6 Reporter: Jan Friesse <jfriesse>
Component: resource-agentsAssignee: Chris Feist <cfeist>
Status: CLOSED ERRATA QA Contact: Cluster QE <mspqa-list>
Severity: urgent Docs Contact:
Priority: urgent    
Version: 6.2CC: agk, ccaulfie, cluster-maint, djansa, lhh, mjuricek, patrick.vangilst, rpeterso, sbradley, teigland
Target Milestone: rc   
Target Release: ---   
Hardware: x86_64   
OS: Linux   
Whiteboard:
Fixed In Version: resource-agents-3.9.2-10.el6 Doc Type: Bug Fix
Doc Text:
No documentation needed
 Story Points: ---
Clone Of: 797192 Environment:
Last Closed: 2012-06-20 14:41:29 UTC Type: ---
Regression: --- Mount Type: ---
Documentation: --- CRM:
Verified Versions: Category: ---
oVirt Team: --- RHEL 7.3 requirements from Atomic Host:
Cloudforms Team: --- Target Upstream Version:
Bug Depends On: 797192    
Bug Blocks:    
Attachments:
Description Flags
Fix for resource-agents none

Comment 1 Jan Friesse 2012-02-27 14:42:53 UTC 
Lon,
even the *main* bug in corosync is fixed, there is still one issue with rgmanager/resource script/... (please reassign to component you feel it should be). Problem is, that rpc.statd calls /usr/share/cluster/nfsserver.sh with parameter add-client/del-client. This calls ocf_log and clulog is trying to do IPC connection with corosync, but not as a root user account, but as a *rpcuser*.

This may be problem, because such connection is prohibited as long as rpcuser doesn't exists in corosync uid/gid entries. In other words, users may not get message if they want it.

My proposed solution is one of following:
- force clulog to always run as some user which is allowed for corosync ipc
- don't use clulog for add/del-client
- force cman to always add rpcuser to corosync uid/gid entries (but keep in mind, that this may be security problem... maybe)
- document rpc.statd behavior and recommendation to add rpcuser to corosync uid/gid entries.
Comment 3 Lon Hohberger 2012-02-27 22:16:58 UTC 
Created attachment 566156 [details]
Fix for resource-agents
Comment 6 Patrick Van Gilst 2012-02-29 14:03:24 UTC 
I confirm that the fix works. Thanks a lot
Comment 13 Chris Feist 2012-04-30 22:26:34 UTC 
    Technical note added. If any revisions are required, please edit the "Technical Notes" field
    accordingly. All revisions will be proofread by the Engineering Content Services team.
    
    New Contents:
No documentation needed
Comment 16 errata-xmlrpc 2012-06-20 14:41:29 UTC 
Since the problem described in this bug report should be
resolved in a recent advisory, it has been closed with a
resolution of ERRATA.

For information on the advisory, and where to find the updated
files, follow the link below.

If the solution does not work for you, open a new bug report.

http://rhn.redhat.com/errata/RHBA-2012-0947.html