Bug 485462 - Normal users cannot run CPG clients if corosync is started by cman.
Summary: Normal users cannot run CPG clients if corosync is started by cman.
Keywords:
Status: CLOSED RAWHIDE
Alias: None
Product: Fedora
Classification: Fedora
Component: openais
Version: 10
Hardware: All
OS: Linux
high
high
Target Milestone: ---
Assignee: Steven Dake
QA Contact: Fedora Extras Quality Assurance
URL:
Whiteboard:
Depends On:
Blocks:
TreeView+ depends on / blocked
 
Reported: 2009-02-13 17:16 UTC by Alan Conway
Modified: 2016-04-26 23:49 UTC (History)
4 users (show)

Fixed In Version:
Doc Type: Bug Fix
Doc Text:
Clone Of:
Environment:
Last Closed: 2009-02-19 10:27:42 UTC
Type: ---
Embargoed:


Attachments (Terms of Use)

Description Alan Conway 2009-02-13 17:16:50 UTC
Description of problem:

Run cman, run a CPG client as a non-root user with gid=ais: cpg_init
returns error 11 - access denied. Running the CPG client as root works. 

If corosync is started without cman, then running CPG client as non-root user with gid=ais works correctly.

(11:50:11 AM) sdake: if root is uid gid is not checked
(11:51:33 AM) sdake: my guess is the config loader is setting the uid or gid fields in the config file
(11:51:38 AM) sdake: mainconfig.c should do this automatically
(11:51:50 AM) sdake: by config loader, i mean the cman config loader
(11:51:57 AM) sdake: you can put that in the bz aswell

Comment 1 Christine Caulfield 2009-02-16 14:09:10 UTC
cman sets uid/gid to root. This was mainly to avoid configuration troubles as we otherwise would have had to add users & groups in the packaging for "ais".

If we can add these entries then I'll change cman's config loader.

Comment 2 Christine Caulfield 2009-02-18 11:18:43 UTC
I've committed fix for this to git. It should turn up in the next Fedora package.

commit 4ee81b60d86a4147b35cf71c41bfe24a2a8632cb
Author: Christine Caulfield <ccaulfie>
Date:   Wed Feb 18 11:11:56 2009 +0000

    cman: Allow connections from unprivileged user/group "ais"

    bz#485469

Comment 3 Christine Caulfield 2009-02-19 10:27:42 UTC
cluster-3.0.0-7.alpha4.fc11


Note You need to log in before you can comment on or make changes to this bug.