Bug 1413079 - vdsm-tool configure --module sanlock doesn't actually confirm proper group membership
Summary: vdsm-tool configure --module sanlock doesn't actually confirm proper group me...
Keywords:
Status: CLOSED WONTFIX
Alias: None
Product: Red Hat Enterprise Virtualization Manager
Classification: Red Hat
Component: vdsm
Version: unspecified
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ovirt-4.3.0
: ---
Assignee: Benny Zlotnik
QA Contact: Elad
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2017-01-13 15:06 UTC by Jaroslav Suchanek
Modified: 2019-04-28 10:03 UTC (History)
12 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 1396675
Environment:
Last Closed: 2018-08-06 08:50:29 UTC
oVirt Team: Storage
Target Upstream Version:


Attachments (Terms of Use)

Description Jaroslav Suchanek 2017-01-13 15:06:20 UTC
Description of problem:

TL;DR:

The "vdsm-tool configure --module sanlock" command should NOT report success if it isn't able to add the sanlock users to the groups and instead should report a helpful error message.

LONG VERSION:

vdsm-tool configure --module sanlock

The above command is supposed to add the sanlock user to the qemu and kvm groups.

If kvm is coming from IDM, this command will NOT be able to add the sanlock user to the group, however, the command will still report success! 

I know it is not advisable to have system group in IDM, but for other complicated reasons it was.

The "vdsm-tool configure" command should NOT report success if it isn't able to add the sanlock users to the groups and instead should report a helpful error message.

Comment 1 Nir Soffer 2017-01-17 10:54:31 UTC
Jaroslav,
- Did you run this with --force?
- How do you reproduce this issue?
- What is "kvm is comming from IDM"? do you mean there is no kvm group?

Comment 2 Jaroslav Suchanek 2017-01-17 16:04:25 UTC
(In reply to Nir Soffer from comment #1)
> Jaroslav,
> - Did you run this with --force?
> - How do you reproduce this issue?
> - What is "kvm is comming from IDM"? do you mean there is no kvm group?

I am sorry. I am not the original reporter. It is dkelson@gurulabs.com so I am resetting the needinfo.

Please note that this bug I cloned from bug 1396675. It was the only way how to move it from rhel product to rhev product. I am sorry about that.

Comment 3 Dax Kelson 2017-01-17 17:01:31 UTC
(In reply to Nir Soffer from comment #1)
> Jaroslav,
> - Did you run this with --force?

Yes

> - How do you reproduce this issue?

Have your box attached to a FreeIPA/IDM server with a kvm group defined in IDM.

> - What is "kvm is comming from IDM"? do you mean there is no kvm group?

There IS a kvm group, but it is in IDM not in /etc/group, thus vdsm-tool is unable to add the sanlock user to the kvm group.


Note You need to log in before you can comment on or make changes to this bug.