ganesha library: NFSv3 mount fails when access is allowed for more than one IP

[karthick]

While using glusterfs (NFS) driver that makes use of ganesha library, allowing access to more than one Manila client/nova VM fails.

# manila access-list 8b5fc0ea-0413-4b9b-be81-e5ca74d24b4e
+--------------------------------------+-------------+-------------+--------------+--------+
| id | access type | access to | access level | state |
+--------------------------------------+-------------+-------------+--------------+--------+
| 4491e2a5-1567-4496-ac65-0f0644f4ca8f | ip | 10.xx.xx.86 | rw | active |
| 87e52d44-fe53-4d38-9307-aa94e396ace6 | ip | 10.xx.xx.85 | rw | active |
+--------------------------------------+-------------+-------------+--------------+--------+

[root@centos-vm-01 centos]# showmount -e 10.xx.xx.42
Export list for 10.xx.xx.42:
/share-8b5fc0ea-0413-4b9b-be81-e5ca74d24b4e 10.xx.xx.86
/share-8b5fc0ea-0413-4b9b-be81-e5ca74d24b4e 10.xx.xx.85

NFS mount of the share 8b5fc0ea-0413-4b9b-be81-e5ca74d24b4e succeeds in client with IP 10.xx.xx.86, but fails in client with IP 10.xx.xx.85 as follows,
root@centos-vm-01 centos]# mount 10.xx.xx.42:/share-8b5fc0ea-0413-4b9b-be81-e5ca74d24b4e /ganesha2/
mount.nfs: access denied by server while mounting 10.xx.xx.42:/share-8b5fc0ea-0413-4b9b-be81-e5ca74d24b4e

Allowing access to more than one VM should update the IPs within the same export list, however a new export list is created for each allow access request as seen in the above "showmount" output. So the first export list might override any subsequent access requests.

[karthick (kramdoss)]

This bug will restrict nfsv3 mounts when access is allowed on a 'per IP basis'. However, when access is allowed with CIDR notation(as shown below) nfsv3 mounts can be done.

manila access-list 8b5fc0ea-0413-4b9b-be81-e5ca74d24b4e
+--------------------------------------+-------------+---------------+--------------+--------+
| id | access type | access to | access level | state |
+--------------------------------------+-------------+---------------+--------------+--------+
| 1faafbb5-1260-4495-a890-8fad927e1068 | ip | 10.xx.xx.0/23 | rw | active |
+--------------------------------------+-------------+---------------+--------------+--------+

Also, please note that this bug doesn't affect nfsv4 mounts.

[Jason Grosso (jgrosso)]

Csaba you still working this defect?

[Jason Grosso (jgrosso)]

Csaba please re-open this if it is still an issue thanks jason