neutron

vpnaas: Copy strongswan.d needs root rights

Bug #1586986 reported by Thomas Bechtold on 2016-05-30

This bug affects 1 person

Affects		Status	Importance	Assigned to	Milestone
	neutron	Fix Released	Undecided	Thomas Bechtold

Bug Description

Using shutil.copytree() doesn't work if "/etc/strongwan.d/ is owned by root but the neutron-vpn-agent is running on a different user (i.e. "neutron").
The error message is:

2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher [req-a50cffcd-b59e-4aa3-a38c-80276e7855f2 bb02d9c6a9d142bdb9beb6dea7b71271 49748f1f979846ec9b05f100bffe30a8 - - -] Exception during message handling: [('/etc/strongswan.d/starter.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/starter.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/starter.conf'"), ('/etc/strongswan.d/tools.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/tools.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/tools.conf'"), ('/etc/strongswan.d/charon.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon.conf'"), ('/etc/strongswan.d/charon-logging.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon-logging.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon-logging.conf'"), ('/etc/strongswan.d/pool.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/pool.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/pool.conf'"), ('/etc/strongswan.d/imcv.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/imcv.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/imcv.conf'"), ('/etc/strongswan.d/tnc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/tnc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/tnc.conf'"), ('/etc/strongswan.d/charon/x509.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/x509.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/x509.conf'"), ('/etc/strongswan.d/charon/radattr.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/radattr.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/radattr.conf'"), ('/etc/strongswan.d/charon/pkcs8.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs8.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs8.conf'"), ('/etc/strongswan.d/charon/fips-prf.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/fips-prf.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/fips-prf.conf'"), ('/etc/strongswan.d/charon/smp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/smp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/smp.conf'"), ('/etc/strongswan.d/charon/eap-identity.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-identity.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-identity.conf'"), ('/etc/strongswan.d/charon/tnc-tnccs.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-tnccs.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-tnccs.conf'"), ('/etc/strongswan.d/charon/ldap.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ldap.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ldap.conf'"), ('/etc/strongswan.d/charon/dnskey.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/dnskey.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/dnskey.conf'"), ('/etc/strongswan.d/charon/sha2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sha2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sha2.conf'"), ('/etc/strongswan.d/charon/tnc-pdp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-pdp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-pdp.conf'"), ('/etc/strongswan.d/charon/sshkey.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sshkey.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sshkey.conf'"), ('/etc/strongswan.d/charon/pkcs7.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs7.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs7.conf'"), ('/etc/strongswan.d/charon/eap-dynamic.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-dynamic.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-dynamic.conf'"), ('/etc/strongswan.d/charon/hmac.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/hmac.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/hmac.conf'"), ('/etc/strongswan.d/charon/xauth-eap.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xauth-eap.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xauth-eap.conf'"), ('/etc/strongswan.d/charon/des.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/des.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/des.conf'"), ('/etc/strongswan.d/charon/eap-ttls.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-ttls.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-ttls.conf'"), ('/etc/strongswan.d/charon/revocation.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/revocation.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/revocation.conf'"), ('/etc/strongswan.d/charon/eap-mschapv2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-mschapv2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-mschapv2.conf'"), ('/etc/strongswan.d/charon/ccm.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ccm.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ccm.conf'"), ('/etc/strongswan.d/charon/stroke.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/stroke.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/stroke.conf'"), ('/etc/strongswan.d/charon/rc2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/rc2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/rc2.conf'"), ('/etc/strongswan.d/charon/cmac.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/cmac.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/cmac.conf'"), ('/etc/strongswan.d/charon/pkcs11.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs11.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs11.conf'"), ('/etc/strongswan.d/charon/pkcs1.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs1.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs1.conf'"), ('/etc/strongswan.d/charon/eap-md5.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-md5.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-md5.conf'"), ('/etc/strongswan.d/charon/openssl.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/openssl.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/openssl.conf'"), ('/etc/strongswan.d/charon/certexpire.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/certexpire.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/certexpire.conf'"), ('/etc/strongswan.d/charon/gmp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/gmp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/gmp.conf'"), ('/etc/strongswan.d/charon/coupling.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/coupling.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/coupling.conf'"), ('/etc/strongswan.d/charon/sql.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sql.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sql.conf'"), ('/etc/strongswan.d/charon/xcbc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xcbc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xcbc.conf'"), ('/etc/strongswan.d/charon/xauth-pam.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xauth-pam.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xauth-pam.conf'"), ('/etc/strongswan.d/charon/eap-gtc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-gtc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-gtc.conf'"), ('/etc/strongswan.d/charon/eap-aka.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-aka.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-aka.conf'"), ('/etc/strongswan.d/charon/eap-sim-file.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-sim-file.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-sim-file.conf'"), ('/etc/strongswan.d/charon/soup.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/soup.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/soup.conf'"), ('/etc/strongswan.d/charon/addrblock.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/addrblock.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/addrblock.conf'"), ('/etc/strongswan.d/charon/pgp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pgp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pgp.conf'"), ('/etc/strongswan.d/charon/eap-simaka-pseudonym.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-simaka-pseudonym.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-simaka-pseudonym.conf'"), ('/etc/strongswan.d/charon/constraints.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/constraints.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/constraints.conf'"), ('/etc/strongswan.d/charon/pkcs12.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pkcs12.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pkcs12.conf'"), ('/etc/strongswan.d/charon/af-alg.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/af-alg.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/af-alg.conf'"), ('/etc/strongswan.d/charon/eap-simaka-sql.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-simaka-sql.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-simaka-sql.conf'"), ('/etc/strongswan.d/charon/curl.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/curl.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/curl.conf'"), ('/etc/strongswan.d/charon/socket-default.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/socket-default.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/socket-default.conf'"), ('/etc/strongswan.d/charon/pubkey.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pubkey.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pubkey.conf'"), ('/etc/strongswan.d/charon/blowfish.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/blowfish.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/blowfish.conf'"), ('/etc/strongswan.d/charon/gcm.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/gcm.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/gcm.conf'"), ('/etc/strongswan.d/charon/xauth-generic.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/xauth-generic.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/xauth-generic.conf'"), ('/etc/strongswan.d/charon/tnc-imv.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-imv.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-imv.conf'"), ('/etc/strongswan.d/charon/unity.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/unity.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/unity.conf'"), ('/etc/strongswan.d/charon/duplicheck.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/duplicheck.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/duplicheck.conf'"), ('/etc/strongswan.d/charon/aes.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/aes.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/aes.conf'"), ('/etc/strongswan.d/charon/md5.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/md5.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/md5.conf'"), ('/etc/strongswan.d/charon/eap-radius.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-radius.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-radius.conf'"), ('/etc/strongswan.d/charon/eap-aka-3gpp2.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-aka-3gpp2.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-aka-3gpp2.conf'"), ('/etc/strongswan.d/charon/kernel-netlink.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/kernel-netlink.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/kernel-netlink.conf'"), ('/etc/strongswan.d/charon/resolve.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/resolve.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/resolve.conf'"), ('/etc/strongswan.d/charon/eap-sim.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-sim.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-sim.conf'"), ('/etc/strongswan.d/charon/attr.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/attr.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/attr.conf'"), ('/etc/strongswan.d/charon/agent.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/agent.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/agent.conf'"), ('/etc/strongswan.d/charon/ctr.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ctr.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ctr.conf'"), ('/etc/strongswan.d/charon/farp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/farp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/farp.conf'"), ('/etc/strongswan.d/charon/attr-sql.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/attr-sql.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/attr-sql.conf'"), ('/etc/strongswan.d/charon/random.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/random.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/random.conf'"), ('/etc/strongswan.d/charon/ha.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/ha.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/ha.conf'"), ('/etc/strongswan.d/charon/eap-simaka-reauth.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-simaka-reauth.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-simaka-reauth.conf'"), ('/etc/strongswan.d/charon/nonce.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/nonce.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/nonce.conf'"), ('/etc/strongswan.d/charon/tnccs-dynamic.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnccs-dynamic.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnccs-dynamic.conf'"), ('/etc/strongswan.d/charon/tnc-imc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnc-imc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnc-imc.conf'"), ('/etc/strongswan.d/charon/dhcp.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/dhcp.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/dhcp.conf'"), ('/etc/strongswan.d/charon/gcrypt.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/gcrypt.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/gcrypt.conf'"), ('/etc/strongswan.d/charon/eap-tnc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-tnc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-tnc.conf'"), ('/etc/strongswan.d/charon/led.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/led.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/led.conf'"), ('/etc/strongswan.d/charon/eap-tls.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-tls.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-tls.conf'"), ('/etc/strongswan.d/charon/eap-peap.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-peap.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-peap.conf'"), ('/etc/strongswan.d/charon/tnccs-11.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnccs-11.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnccs-11.conf'"), ('/etc/strongswan.d/charon/tnccs-20.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/tnccs-20.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/tnccs-20.conf'"), ('/etc/strongswan.d/charon/pem.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/pem.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/pem.conf'"), ('/etc/strongswan.d/charon/sha1.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/sha1.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/sha1.conf'"), ('/etc/strongswan.d/charon/eap-sim-pcsc.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/eap-sim-pcsc.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/eap-sim-pcsc.conf'"), ('/etc/strongswan.d/charon/updown.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/updown.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/updown.conf'"), ('/etc/strongswan.d/charon/md4.conf', u'/var/lib/neutron/ipsec/c987ad68-be1b-468f-ac05-2d3c021248f1/etc/strongswan.d/charon/md4.conf', "[Errno 13] Permission denied: '/etc/strongswan.d/charon/md4.conf'")]
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher Traceback (most recent call last):
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 142, in _dispatch_and_reply
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher executor_callback))
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 186, in _dispatch
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher executor_callback)
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib/python2.7/site-packages/oslo_messaging/rpc/dispatcher.py", line 129, in _do_dispatch
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher result = func(ctxt, **new_args)
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 669, in vpnservice_updated
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher self.sync(context, [router] if router else [])
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib/python2.7/site-packages/oslo_concurrency/lockutils.py", line 254, in inner
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher return f(*args, **kwargs)
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 823, in sync
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher self._sync_vpn_processes(vpnservices, sync_router_ids)
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 847, in _sync_vpn_processes
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher process.update()
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 238, in update
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher self.enable()
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/ipsec.py", line 256, in enable
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher self.ensure_configs()
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/strongswan_ipsec.py", line 132, in ensure_configs
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher self._get_config_filename('strongswan.d'))
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib/python2.7/site-packages/neutron_vpnaas/services/vpn/device_drivers/strongswan_ipsec.py", line 109, in copy_and_overwrite
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher shutil.copytree(from_path, to_path)
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher File "/usr/lib64/python2.7/shutil.py", line 208, in copytree
2016-05-30 08:21:09.974 25950 ERROR oslo_messaging.rpc.dispatcher raise Error, errors

Tags:

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-05-30: Fix proposed to neutron-vpnaas (master)

Fix proposed to branch: master
Review: https://review.openstack.org/322743

Changed in neutron:
assignee:	nobody → Thomas Bechtold (toabctl)
status:	New → In Progress

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-05-31: Fix merged to neutron-vpnaas (master)

Reviewed: https://review.openstack.org/322743
Committed: https://git.openstack.org/cgit/openstack/neutron-vpnaas/commit/?id=beff6e945ce4cf31f4a6ae977df72410dc80b717
Submitter: Jenkins
Branch: master

commit beff6e945ce4cf31f4a6ae977df72410dc80b717
Author: Thomas Bechtold <email address hidden>
Date: Mon May 30 11:52:43 2016 +0200

Copy/remove the strongswan.d config as root

    The strongswan.d config dir (usually /etc/strongswan.d) is usually owned
    by root but the neutron-vpn-agent may run as non-root so the files need
    to be copied as root to not get a "permission denied" error.

Change-Id: I40785f8c89b304efdf0f95469ec5a2d57b0cad60
Closes-Bug: #1586986

Changed in neutron:
status:	In Progress → Fix Released

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-06-01: Fix proposed to neutron-vpnaas (stable/mitaka)

Fix proposed to branch: stable/mitaka
Review: https://review.openstack.org/323674

Revision history for this message

Doug Hellmann (doug-hellmann) wrote on 2016-06-03: Fix included in openstack/neutron-vpnaas 9.0.0.0b1

This issue was fixed in the openstack/neutron-vpnaas 9.0.0.0b1 development milestone.

Revision history for this message

OpenStack Infra (hudson-openstack) wrote on 2016-07-09: Fix merged to neutron-vpnaas (stable/mitaka)

Reviewed: https://review.openstack.org/323674
Committed: https://git.openstack.org/cgit/openstack/neutron-vpnaas/commit/?id=49ecc81bc2acc9d692a35fdac8cc125ff6575ec8
Submitter: Jenkins
Branch: stable/mitaka

commit 49ecc81bc2acc9d692a35fdac8cc125ff6575ec8
Author: Thomas Bechtold <email address hidden>
Date: Mon May 30 11:52:43 2016 +0200

Copy/remove the strongswan.d config as root

    Change-Id: I40785f8c89b304efdf0f95469ec5a2d57b0cad60
    Closes-Bug: #1586986
    (cherry picked from commit beff6e945ce4cf31f4a6ae977df72410dc80b717)

tags:

added: in-stable-mitaka

Revision history for this message

Doug Hellmann (doug-hellmann) wrote on 2016-08-29: Fix included in openstack/neutron-vpnaas 8.2.0

This issue was fixed in the openstack/neutron-vpnaas 8.2.0 release.

Report a bug

This report contains Public information

Everyone can see this information.

You are

Subscribing...

Edit bug mail

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.