-----BEGIN PGP SIGNED MESSAGE----- Hash: SHA1 Hi Tao, Thanks for your previous support. We are having some major acl problems on ocfs2. When I mkdir test folder on one node (the permission is right), but appears wrong permission on the other node (both umask are same 0022), Note the timestamps are exactly the same. On node 1: root at webcluster1:/var/www# mkdir test root at webcluster1:/var/www# stat test File: `test' Size: 3896 Blocks: 0 IO Block: 4096 directory Device: fe03h/65027d Inode: 63250275 Links: 2 *Access: (0755/drwxr-xr-x)* Uid: ( 0/ root) Gid: ( 0/ root) Access: 2009-07-15 11:43:26.230219294 +1200 Modify: 2009-07-15 11:43:26.230219294 +1200 Change: 2009-07-15 11:43:26.230219294 +1200 On node 2: root at webcluster2:/var/www# stat test File: `test' Size: 3896 Blocks: 0 IO Block: 4096 directory Device: fe03h/65027d Inode: 63250275 Links: 2 *Access: (0777/drwxrwxrwx)* Uid: ( 0/ root) Gid: ( 0/ root) Access: 2009-07-15 11:43:26.230219294 +1200 Modify: 2009-07-15 11:43:26.230219294 +1200 Change: 2009-07-15 11:43:26.230219294 +1200 But after I do " setfacl -m group:grpname:rx test ", it appears right permissions on both node. - ------ I am running two nodes debian lenny (upgraded kernel to 2.26.9.5), ocfs2-tools-1.4.2-1 mkfs.ocfs2 -L "webocfs2" --fs-features=xattr /dev/wwwbackup/vol01 Current mount status: /dev/mapper/wwwbackup-vol01 on /var/www type ocfs2 (rw,_netdev,acl,heartbeat=local) Thanks - -- Marco -----BEGIN PGP SIGNATURE----- Version: GnuPG v1.4.9 (Darwin) Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org iEYEARECAAYFAkpdGWMACgkQSSHqatd3m2MzNQCbB3vQa/b6G/TymMx3U6mHFlEQ V9kAn0DWLq5hVRnC0TTD5h140PihF5Jb =labE -----END PGP SIGNATURE-----
Hi, Marco, To make the problem simple, could you do a test like this: first, umount ocfs2 and fsck.ocfs2 -f /dev/mapper/wwwbackup-vol01 1. mount ocfs2 WITHOUT acl 2. mkdir test1 3. stat test1 on two nodes. 4. getfacl test1 on two nodes. 5. touch t1 6. stat t1 on two nodes. 7. getfacl t1 on two nodes. 1. umount and remount the ocfs2 with acl. 2. mkdir test2 3. stat test2 on two nodes. 4. getfacl test2 on two nodes. 5. touch t2 6. stat t2 on two nodes. 7. getfacl t2 on two nodes. we can compare the results to know whether it is caused by acl. > I am running two nodes debian lenny (upgraded kernel to 2.26.9.5), I guess your kernel is 2.6.29.5, right? Thanks, tiger Marco Huang wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi Tao, > > Thanks for your previous support. We are having some major acl > problems on ocfs2. > > When I mkdir test folder on one node (the permission is right), but > appears wrong permission on the other node (both umask are same 0022), > > Note the timestamps are exactly the same. > On node 1: > root at webcluster1:/var/www# mkdir test > root at webcluster1:/var/www# stat test > File: `test' > Size: 3896 Blocks: 0 IO Block: 4096 directory > Device: fe03h/65027d Inode: 63250275 Links: 2 > *Access: (0755/drwxr-xr-x)* Uid: ( 0/ root) Gid: ( 0/ root) > Access: 2009-07-15 11:43:26.230219294 +1200 > Modify: 2009-07-15 11:43:26.230219294 +1200 > Change: 2009-07-15 11:43:26.230219294 +1200 > > On node 2: > root at webcluster2:/var/www# stat test > File: `test' > Size: 3896 Blocks: 0 IO Block: 4096 directory > Device: fe03h/65027d Inode: 63250275 Links: 2 > *Access: (0777/drwxrwxrwx)* Uid: ( 0/ root) Gid: ( 0/ root) > Access: 2009-07-15 11:43:26.230219294 +1200 > Modify: 2009-07-15 11:43:26.230219294 +1200 > Change: 2009-07-15 11:43:26.230219294 +1200 > > > But after I do " setfacl -m group:grpname:rx test ", it appears right > permissions on both node. > - ------ > I am running two nodes debian lenny (upgraded kernel to 2.26.9.5), > ocfs2-tools-1.4.2-1 > > mkfs.ocfs2 -L "webocfs2" --fs-features=xattr /dev/wwwbackup/vol01 > > Current mount status: > /dev/mapper/wwwbackup-vol01 on /var/www type ocfs2 > (rw,_netdev,acl,heartbeat=local) > > > Thanks > > - -- > Marco > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (Darwin) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iEYEARECAAYFAkpdGWMACgkQSSHqatd3m2MzNQCbB3vQa/b6G/TymMx3U6mHFlEQ > V9kAn0DWLq5hVRnC0TTD5h140PihF5Jb > =labE > -----END PGP SIGNATURE----- > > > _______________________________________________ > Ocfs2-users mailing list > Ocfs2-users at oss.oracle.com > http://oss.oracle.com/mailman/listinfo/ocfs2-users
Hi, Marco, Thanks a lot, it is really a bug in ocfs2 acl. I can reproduce it now and find the cause. I will send a patch to fix it after done some test. thanks, tiger Marco Huang wrote:> -----BEGIN PGP SIGNED MESSAGE----- > Hash: SHA1 > > Hi Tao, > > Thanks for your previous support. We are having some major acl > problems on ocfs2. > > When I mkdir test folder on one node (the permission is right), but > appears wrong permission on the other node (both umask are same 0022), > > Note the timestamps are exactly the same. > On node 1: > root at webcluster1:/var/www# mkdir test > root at webcluster1:/var/www# stat test > File: `test' > Size: 3896 Blocks: 0 IO Block: 4096 directory > Device: fe03h/65027d Inode: 63250275 Links: 2 > *Access: (0755/drwxr-xr-x)* Uid: ( 0/ root) Gid: ( 0/ root) > Access: 2009-07-15 11:43:26.230219294 +1200 > Modify: 2009-07-15 11:43:26.230219294 +1200 > Change: 2009-07-15 11:43:26.230219294 +1200 > > On node 2: > root at webcluster2:/var/www# stat test > File: `test' > Size: 3896 Blocks: 0 IO Block: 4096 directory > Device: fe03h/65027d Inode: 63250275 Links: 2 > *Access: (0777/drwxrwxrwx)* Uid: ( 0/ root) Gid: ( 0/ root) > Access: 2009-07-15 11:43:26.230219294 +1200 > Modify: 2009-07-15 11:43:26.230219294 +1200 > Change: 2009-07-15 11:43:26.230219294 +1200 > > > But after I do " setfacl -m group:grpname:rx test ", it appears right > permissions on both node. > - ------ > I am running two nodes debian lenny (upgraded kernel to 2.26.9.5), > ocfs2-tools-1.4.2-1 > > mkfs.ocfs2 -L "webocfs2" --fs-features=xattr /dev/wwwbackup/vol01 > > Current mount status: > /dev/mapper/wwwbackup-vol01 on /var/www type ocfs2 > (rw,_netdev,acl,heartbeat=local) > > > Thanks > > - -- > Marco > > -----BEGIN PGP SIGNATURE----- > Version: GnuPG v1.4.9 (Darwin) > Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org > > iEYEARECAAYFAkpdGWMACgkQSSHqatd3m2MzNQCbB3vQa/b6G/TymMx3U6mHFlEQ > V9kAn0DWLq5hVRnC0TTD5h140PihF5Jb > =labE > -----END PGP SIGNATURE----- > > > _______________________________________________ > Ocfs2-users mailing list > Ocfs2-users at oss.oracle.com > http://oss.oracle.com/mailman/listinfo/ocfs2-users