cannot chown on NFS shares created by generic and LVM drivers

Bug #1551422 reported by Rodrigo Barbieri
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Shared File Systems Service (Manila)
Fix Released
High
Rodrigo Barbieri

Bug Description

Consider following scenario:

1) userA creates share_X and adds RW rule for userA and userB respective IP addresses.
2) userA mounts share_X and creates a folder in it. Folder will have userA ownership.
3) userB mounts share_X and tries to create a folder inside userA's folder. It says permission denied.
4) userB cannot sudo to create the folder, and userA cannot change ownership of own folder to userB or to anonymous.
5) workaround is both users sudo and create folders and files anonymously. Purpose of having users is defeated.

Consider this other scenario:

1) userA creates share_X and adds RW rule for userA and userB respective IP addresses.
2) userA mounts share_X and creates a file in it. File will have userA ownership.
3) userB mounts share_X and tries to edit userA's file. It says permission denied.
4) userB cannot sudo to edit the file, and userA cannot change ownership of own file to userB or to anonymous.
5) workaround is both users sudo and create folders and files anonymously. Purpose of having users is defeated.

Possible solution is use "no_root_squash" when adding NFS access rules.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to manila (master)

Fix proposed to branch: master
Review: https://review.openstack.org/286296

Changed in manila:
assignee: nobody → Rodrigo Barbieri (rodrigo-barbieri2010)
status: New → In Progress
Changed in manila:
importance: Undecided → Critical
importance: Critical → High
milestone: none → mitaka-3
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila (master)

Reviewed: https://review.openstack.org/286296
Committed: https://git.openstack.org/cgit/openstack/manila/commit/?id=93ddac3dea02f84ca16dafc5e7cf02f176d3efa5
Submitter: Jenkins
Branch: master

commit 93ddac3dea02f84ca16dafc5e7cf02f176d3efa5
Author: Rodrigo Barbieri <email address hidden>
Date: Mon Feb 29 18:35:23 2016 -0300

    Fix NFS helper root squashing in RW access level

    Root squashing should be disabled in NFS helper when adding
    RW access rules to fix permission denied issues while different
    users are creating files and folders in the same share.

    Change-Id: I36d1cab62fcc1a2279454096f9d0ad65c96e7b9b
    Closes-bug: #1551422

Changed in manila:
status: In Progress → Fix Released
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.