Authorizing simultaneous rules to a group fails

[Sylvain Pineau]

I tried to enable SSH (port 22) and HTTP (port 80) to an existing security group but only the first one was registered.

It can be reproduced with the following script :

#!/bin/sh
euca-add-group -d HHHHHHH bug
euca-authorize -P tcp -p 22 -s 0.0.0.0/0 bug &
euca-authorize -P tcp -p 80 -s 0.0.0.0/0 bug &
sleep 2
echo '###########################################'
euca-describe-groups
euca-delete-group bug

If I sleep 2 seconds between the 2 calls to euca-authorize it works.
euca-authorize does not report any errors on second call.

[C de-Avillez (hggdh2)]

Confirmed, Eucalyptus 1.6.2-0ubuntu30.2 (running the same script as Sylvain):

ubuntu@cempedak:~$ euca-describe-groups
GROUP admin default default group
PERMISSION admin default ALLOWS tcp 22 22 FROM CIDR 0.0.0.0/0
GROUP admin uectest test group
PERMISSION admin uectest ALLOWS tcp 22 22 FROM CIDR 0.0.0.0/0
ubuntu@cempedak:~$ bash ./bug592641.sh
GROUP bug HHHHHHH
GROUP bug
PERMISSION bug ALLOWS tcp 80 80 FROM CIDR 0.0.0.0/0
GROUP bug
PERMISSION bug ALLOWS tcp 22 22 FROM CIDR 0.0.0.0/0
###########################################
GROUP admin bug HHHHHHH
PERMISSION admin bug ALLOWS tcp 80 80 FROM CIDR 0.0.0.0/0
GROUP admin default default group
PERMISSION admin default ALLOWS tcp 22 22 FROM CIDR 0.0.0.0/0
GROUP admin uectest test group
PERMISSION admin uectest ALLOWS tcp 22 22 FROM CIDR 0.0.0.0/0
GROUP bug
ubuntu@cempedak:~$

In my case, though, the *second* call succeeded.

[Andy Grimm (agrimm)]

This issue is now being tracked upstream at http://eucalyptus.atlassian.net/browse/EUCA-2708

Please watch that issue for further updates.