[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]

[Rdo-list] Tripleo Liberty Cinder permission denied



Hi,

Deployed Tripleo Liberty stable on baremetal, but NetApp NFS Cinder backend is not working.

It is auto-mounting no problem, and I can write to it with sudo, but the 'tripleo_netapp' backend is enabled with state 'down' as it cannot write to the mount point.

 cinder service-list | grep tripleo_netapp
|  cinder-volume   | hostgroup tripleo_netapp | nova | enabled | down

[heat-admin overcloud-controller-0 ~]$ mount | grep cinder
[ip addr]:/[mount] on /var/lib/cinder/mnt/3fb6f6744c383eacbe46593911aa4b0f type nfs4 (rw,relatime,vers=4.1,rsize=65536,wsize=65536,namlen=255,hard,proto=tcp,port=0,timeo=600,retrans=2,sec=sys,clientaddr=[ip addr],local_lock=none,addr=[ip addr])

I can write to it -

[heat-admin overcloud-controller-0 ~]$ sudo touch /var/lib/cinder/mnt/3fb6f6744c383eacbe46593911aa4b0f/test
[heat-admin overcloud-controller-0 ~]$

But Cinder cannot -

/var/log/cinder/volume.log:2016-04-29 09:43:49.870 56696 ERROR cinder.volume.drivers.remotefs [req-99928048-2446-4967-99ba-0e85c2ba5712 - - - - -] Failed to created Cinder secure environment indicator file: [Errno 13] Permission denied: '/var/lib/cinder/mnt/3fb6f6744c383eacbe46593911aa4b0f/.cinderSecureEnvIndicator'

So this look like an issue with the user that Cinder is using to write to the export (cinder?)?

I have tried setting this option in cinder.conf, but it makes no difference

nas_secure_file_operations = False

"Allow network-attached storage systems to operate in a secure environment where root level access is not permitted. If set to False, access is as the root user and insecure. If set to True, access is not as root. If set to auto, a check is done to determine if this is a new installation: True is used if so, otherwise False. Default is auto"

Any help appreciated

Thanks

Charles

--
Charles Short
Cloud Engineer
Virtualization and Cloud Team
European Bioinformatics Institute (EMBL-EBI)
Tel: +44 (0)1223 494205


[Date Prev][Date Next]   [Thread Prev][Thread Next]   [Thread Index] [Date Index] [Author Index]