Bug 1503423 - server.allow-insecure should be visible in "gluster volume set help"
Summary: server.allow-insecure should be visible in "gluster volume set help"
Keywords:
Status: CLOSED EOL
Alias: None
Product: GlusterFS
Classification: Community
Component: glusterd
Version: mainline
Hardware: Unspecified
OS: Unspecified
unspecified
medium
Target Milestone: ---
Assignee: Sanju
QA Contact:
URL:
Whiteboard: glusterd
Depends On: 996511
Blocks: 1284390 1503424 1505373
TreeView+ depends on / blocked
 
Reported: 2017-10-18 06:05 UTC by Sanju
Modified: 2020-01-09 17:49 UTC (History)
6 users (show)

Fixed In Version:
Doc Type: If docs needed, set a value
Doc Text:
Clone Of: 996511
Environment:
Last Closed: 2017-10-18 06:06:41 UTC
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:
Embargoed:


Attachments (Terms of Use)

Description Sanju 2017-10-18 06:05:29 UTC
+++ This bug was initially created as a clone of Bug #996511 +++

Description of problem:

We are suggesting (documenting) customers to set "server.allow-insecure on" for samba/smb share access from RHS servers. 

But if i list the help of  gluster volume set i.e. "gluster volume set help" it is not there. 

However I can run the command successfully. Check the below commands and their output

#gluster volume set server.allow-insecure on

[root@rhs21ISoTest samba]# gluster volume info
 
Volume Name: gfs-vol1
Type: Distribute
Volume ID: 887dc3fe-5f93-4d45-85c9-91a714114de2
Status: Started
Number of Bricks: 2
Transport-type: tcp
Bricks:
Brick1: 10.70.35.220:/bricks/gfs-vol1-b1
Brick2: 10.70.35.220:/bricks/gfs-vol1-b2
Options Reconfigured:
performance.stat-prefetch: off
server.allow-insecure: on

I checked the code found that the volume set option "server.allow-insecure" is defined as "NO_DOC" type, which needs to be changed to fix the issue.

xlators/mgmt/glusterd/src/glusterd-volume-set.c

 { .key         = "server.allow-insecure",
          .voltype     = "protocol/server",
          .option      = "rpc-auth-allow-insecure",
          .type        = NO_DOC,
          .op_version  = 1
        },


Version-Release number of selected component (if applicable):

glusterfs-server-3.4.0.17rhs-1.el6rhs.x86_64

How reproducible:
always

Steps to Reproduce:
1. run gluster volume set help
2. check if help for "server.allow-insecure " is present


Actual results:

"server.allow-insecure " is not present in "gluster volume set help"


Expected results:

"server.allow-insecure " should be present in "gluster volume set help"

Additional info:

--- Additional comment from Christopher R. Hertel on 2013-08-22 18:28:14 EDT ---

> We are suggesting (documenting) customers to set "server.allow-insecure on"
> for samba/smb share access from RHS servers.

This is more than a suggestion.  If the user does not enable server.allow-insecure, Samba (via vfs_glusterfs and libgfapi) will run out of available ports and fail to connect to the Gluster server daemon.  This will cause the SMB clients to fail to connect to the server with only an error message in the Samba logs.  See bug #981612.

This setting must be documented and available to users.

--- Additional comment from Vivek Agarwal on 2015-12-03 12:23:20 EST ---

Thank you for submitting this issue for consideration in Red Hat Gluster Storage. The release for which you requested us to review, is now End of Life. Please See https://access.redhat.com/support/policy/updates/rhs/

If you can reproduce this bug against a currently maintained version of Red Hat Gluster Storage, please feel free to file a new report against the current release.


Note You need to log in before you can comment on or make changes to this bug.