Bug 1777769 - auth-allow of IPv4 address doesn't take netmask into consideration
Summary: auth-allow of IPv4 address doesn't take netmask into consideration
Keywords:
Status: CLOSED NEXTRELEASE
Alias: None
Product: GlusterFS
Classification: Community
Component: rpc
Version: 7
Hardware: Unspecified
OS: Unspecified
unspecified
high
Target Milestone: ---
Assignee: bugs@gluster.org
QA Contact:
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2019-11-28 10:02 UTC by Amar Tumballi
Modified: 2019-12-05 07:17 UTC (History)
1 user (show)

Fixed In Version:
Doc Type: ---
Doc Text:
Clone Of:
Environment:
Last Closed: 2019-12-05 07:17:22 UTC
Regression: ---
Mount Type: ---
Documentation: ---
CRM:
Verified Versions:


Attachments (Terms of Use)


Links
System ID Priority Status Summary Last Updated
Gluster.org Gerrit 23768 None Merged rpcsvc: fix subnet_mask_v4 check 2019-12-05 07:17:21 UTC

Description Amar Tumballi 2019-11-28 10:02:27 UTC
Description of problem:

(From: https://github.com/gluster/glusterfs/issues/765)

just as Info. to restrict NFS mount to an certain subnet we used the above for 3.12.15. and worked.

with gluster7 and gnfs it doesn't work anymore. once placing the code > it's still restricted to mount. if i clear again,.. then it's mountable. So good if possible to restrict simple like with 3.12.15

Version-Release number of selected component (if applicable):
release-7.0

How reproducible:
100%

Steps to Reproduce:
1. 'gluster volume set VOL nfs-auth-allow IP/mask'
2. It doesn't work.
3.

Actual results:
It is not working, and it is rejecting the mount.

Expected results:
It should work.


Additional info:
Upon code reading, it was found to be an issue with RPC.

Comment 1 Worker Ant 2019-11-28 10:03:46 UTC
REVIEW: https://review.gluster.org/23768 (rpcsvc: fix subnet_mask_v4 check) posted (#2) for review on release-7 by Amar Tumballi

Comment 2 Worker Ant 2019-12-05 07:17:22 UTC
REVIEW: https://review.gluster.org/23768 (rpcsvc: fix subnet_mask_v4 check) merged (#2) on release-7 by Amar Tumballi


Note You need to log in before you can comment on or make changes to this bug.