Bug 1049225 - nfs: while using the option nfs.rpc-auth-reject, a volume mount fails but a subdirectory mount still is successful
Summary: nfs: while using the option nfs.rpc-auth-reject, a volume mount fails but a s...
Keywords:
Status: CLOSED CURRENTRELEASE
Alias: None
Product: GlusterFS
Classification: Community
Component: nfs
Version: mainline
Hardware: x86_64
OS: Linux
high
high
Target Milestone: ---
Assignee: Niels de Vos
QA Contact:
URL:
Whiteboard:
Depends On: 1048749
Blocks:
TreeView+ depends on / blocked
 
Reported: 2014-01-07 09:00 UTC by santosh pradhan
Modified: 2014-11-11 08:26 UTC (History)
6 users (show)

Fixed In Version: glusterfs-3.6.0beta1
Doc Type: Bug Fix
Doc Text:
Clone Of: 1048749
Environment:
Last Closed: 2014-11-11 08:26:34 UTC
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Embargoed:


Attachments (Terms of Use)

Comment 1 Anand Avati 2014-01-07 09:02:28 UTC
REVIEW: http://review.gluster.org/6655 (gNFS: mnt3_find_export() by pass AUTH check) posted (#1) for review on master by Santosh Pradhan (spradhan)

Comment 2 Anand Avati 2014-01-08 03:47:51 UTC
REVIEW: http://review.gluster.org/6655 (gNFS: mnt3_find_export() by pass AUTH check) posted (#2) for review on master by Santosh Pradhan (spradhan)

Comment 3 Anand Avati 2014-01-08 03:54:29 UTC
REVIEW: http://review.gluster.org/6655 (gNFS: mnt3_find_export() by pass AUTH check) posted (#3) for review on master by Santosh Pradhan (spradhan)

Comment 4 Anand Avati 2014-01-08 11:54:16 UTC
COMMIT: http://review.gluster.org/6655 committed in master by Vijay Bellur (vbellur) 
------
commit a1e26be05c7b344dc8e7f980d0a6ab00695f2f42
Author: Santosh Kumar Pradhan <spradhan>
Date:   Tue Jan 7 14:22:03 2014 +0530

    gNFS: mnt3_find_export() by pass AUTH check
    
    NFS subdir mount does not respect nfs.rpc-auth-reject option
    in the volume. If the volume is being mounted, then it would
    validate the AUTH by mnt3_check_client_net() but if the client
    is mounting a subdir, the control takes a different code path
    i.e. mnt3_find_export() which does not bother about the AUTH.
    
    FIX:
    Enforce the AUTH check in mnt3_parse_dir_exports() which is
    invoked by mnt3_find_export() for subdir mount.
    
    Change-Id: I6fdd3e6bd6cbd32b0d9ca620cc4c30fdaff9ca30
    BUG: 1049225
    Signed-off-by: Santosh Kumar Pradhan <spradhan>
    Reviewed-on: http://review.gluster.org/6655
    Reviewed-by: Niels de Vos <ndevos>
    Tested-by: Gluster Build System <jenkins.com>
    Reviewed-by: Vijay Bellur <vbellur>

Comment 7 Niels de Vos 2014-09-22 12:34:38 UTC
A beta release for GlusterFS 3.6.0 has been released. Please verify if the release solves this bug report for you. In case the glusterfs-3.6.0beta1 release does not have a resolution for this issue, leave a comment in this bug and move the status to ASSIGNED. If this release fixes the problem for you, leave a note and change the status to VERIFIED.

Packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update (possibly an "updates-testing" repository) infrastructure for your distribution.

[1] http://supercolony.gluster.org/pipermail/gluster-users/2014-September/018836.html
[2] http://supercolony.gluster.org/pipermail/gluster-users/

Comment 8 Niels de Vos 2014-11-11 08:26:34 UTC
This bug is getting closed because a release has been made available that should address the reported issue. In case the problem is still not fixed with glusterfs-3.6.1, please reopen this bug report.

glusterfs-3.6.1 has been announced [1], packages for several distributions should become available in the near future. Keep an eye on the Gluster Users mailinglist [2] and the update infrastructure for your distribution.

[1] http://supercolony.gluster.org/pipermail/gluster-users/2014-November/019410.html
[2] http://supercolony.gluster.org/mailman/listinfo/gluster-users


Note You need to log in before you can comment on or make changes to this bug.