ganesha library: NFSv3 mount fails when access is allowed for more than one IP
Affects | Status | Importance | Assigned to | Milestone | |
---|---|---|---|---|---|
OpenStack Shared File Systems Service (Manila) |
Won't Fix
|
Low
|
Csaba Henk |
Bug Description
While using glusterfs (NFS) driver that makes use of ganesha library, allowing access to more than one Manila client/nova VM fails.
# manila access-list 8b5fc0ea-
+------
| id | access type | access to | access level | state |
+------
| 4491e2a5-
| 87e52d44-
+------
[root@centos-vm-01 centos]# showmount -e 10.xx.xx.42
Export list for 10.xx.xx.42:
/share-
/share-
NFS mount of the share 8b5fc0ea-
root@centos-vm-01 centos]# mount 10.xx.xx.
mount.nfs: access denied by server while mounting 10.xx.xx.
Allowing access to more than one VM should update the IPs within the same export list, however a new export list is created for each allow access request as seen in the above "showmount" output. So the first export list might override any subsequent access requests.
summary: |
- ganesha library: cannot allow access to a share for more than one IP + ganesha library: NFSv3 mount fails when access is allowed on per IP + basis |
summary: |
- ganesha library: NFSv3 mount fails when access is allowed on per IP - basis + ganesha library: NFSv3 mount fails when access is allowed for more than + one IP |
Changed in manila: | |
assignee: | nobody → Csaba Henk (chenk) |
Changed in manila: | |
status: | New → Triaged |
importance: | Undecided → Low |
milestone: | none → newton-1 |
tags: | added: driver gluster nfs |
This bug will restrict nfsv3 mounts when access is allowed on a 'per IP basis'. However, when access is allowed with CIDR notation(as shown below) nfsv3 mounts can be done.
manila access-list 8b5fc0ea- 0413-4b9b- be81-e5ca74d24b 4e ------- ------- ------- ------- ----+-- ------- ----+-- ------- ------+ ------- ------- +------ --+ ------- ------- ------- ------- ----+-- ------- ----+-- ------- ------+ ------- ------- +------ --+ 1260-4495- a890-8fad927e10 68 | ip | 10.xx.xx.0/23 | rw | active | ------- ------- ------- ------- ----+-- ------- ----+-- ------- ------+ ------- ------- +------ --+
+------
| id | access type | access to | access level | state |
+------
| 1faafbb5-
+------
Also, please note that this bug doesn't affect nfsv4 mounts.