Note: This bug is displayed in read-only format because the product is no longer active in Red Hat Bugzilla.

Bug 1503423

Summary:	server.allow-insecure should be visible in "gluster volume set help"
Product:	[Community] GlusterFS	Reporter:	Sanju <srakonde>
Component:	glusterd	Assignee:	Sanju <srakonde>
Status:	CLOSED EOL	QA Contact:
Severity:	medium	Docs Contact:
Priority:	unspecified
Version:	mainline	CC:	bugs, lmohanty, poelstra, rhs-bugs, rwheeler, vbellur
Target Milestone:	---	Keywords:	ZStream
Target Release:	---
Hardware:	Unspecified
OS:	Unspecified
Whiteboard:	glusterd
Fixed In Version:		Doc Type:	If docs needed, set a value
Doc Text:		Story Points:	---
Clone Of:	996511	Environment:
Last Closed:	2017-10-18 06:06:41 UTC	Type:	Bug
Regression:	---	Mount Type:	---
Documentation:	---	CRM:
Verified Versions:		Category:	---
oVirt Team:	---	RHEL 7.3 requirements from Atomic Host:
Cloudforms Team:	---	Target Upstream Version:
Embargoed:
Bug Depends On:	996511
Bug Blocks:	1284390, 1503424, 1505373

Description Sanju 2017-10-18 06:05:29 UTC

+++ This bug was initially created as a clone of Bug #996511 +++

Description of problem:

We are suggesting (documenting) customers to set "server.allow-insecure on" for samba/smb share access from RHS servers. 

But if i list the help of  gluster volume set i.e. "gluster volume set help" it is not there. 

However I can run the command successfully. Check the below commands and their output

#gluster volume set server.allow-insecure on

[root@rhs21ISoTest samba]# gluster volume info
 
Volume Name: gfs-vol1
Type: Distribute
Volume ID: 887dc3fe-5f93-4d45-85c9-91a714114de2
Status: Started
Number of Bricks: 2
Transport-type: tcp
Bricks:
Brick1: 10.70.35.220:/bricks/gfs-vol1-b1
Brick2: 10.70.35.220:/bricks/gfs-vol1-b2
Options Reconfigured:
performance.stat-prefetch: off
server.allow-insecure: on

I checked the code found that the volume set option "server.allow-insecure" is defined as "NO_DOC" type, which needs to be changed to fix the issue.

xlators/mgmt/glusterd/src/glusterd-volume-set.c

 { .key         = "server.allow-insecure",
          .voltype     = "protocol/server",
          .option      = "rpc-auth-allow-insecure",
          .type        = NO_DOC,
          .op_version  = 1
        },


Version-Release number of selected component (if applicable):

glusterfs-server-3.4.0.17rhs-1.el6rhs.x86_64

How reproducible:
always

Steps to Reproduce:
1. run gluster volume set help
2. check if help for "server.allow-insecure " is present


Actual results:

"server.allow-insecure " is not present in "gluster volume set help"


Expected results:

"server.allow-insecure " should be present in "gluster volume set help"

Additional info:

--- Additional comment from Christopher R. Hertel on 2013-08-22 18:28:14 EDT ---

> We are suggesting (documenting) customers to set "server.allow-insecure on"
> for samba/smb share access from RHS servers.

This is more than a suggestion.  If the user does not enable server.allow-insecure, Samba (via vfs_glusterfs and libgfapi) will run out of available ports and fail to connect to the Gluster server daemon.  This will cause the SMB clients to fail to connect to the server with only an error message in the Samba logs.  See bug #981612.

This setting must be documented and available to users.

--- Additional comment from Vivek Agarwal on 2015-12-03 12:23:20 EST ---

Thank you for submitting this issue for consideration in Red Hat Gluster Storage. The release for which you requested us to review, is now End of Life. Please See https://access.redhat.com/support/policy/updates/rhs/

If you can reproduce this bug against a currently maintained version of Red Hat Gluster Storage, please feel free to file a new report against the current release.