NetApp cDOT: Can't write into CIFS share

Bug #1696000 reported by Goutham Pacha Ravi
16
This bug affects 2 people
Affects Status Importance Assigned to Milestone
OpenStack Shared File Systems Service (Manila)
Fix Released
Low
Goutham Pacha Ravi

Bug Description

Steps to reproduce:

* Create a share network, assign a security service (Active Directory) to share network
* Create a cifs share with share server management.
* Add user level access and mount the share on the host

You will notice that the share can be read from, however, can't be written into.

RCA:
This has to do with FlexVolume permissions. When creating a share with manila command, the FlexVolume security style that manila driver grants is is UNIX and 755.

Workaround:
Changed FlexVolume unix permissions it to 777:

Manila driver should create a FlexVolume with NTFS security style.

tags: added: driver netapp
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to manila (master)

Fix proposed to branch: master
Review: https://review.openstack.org/491848

Changed in manila:
assignee: nobody → Goutham Pacha Ravi (gouthamr)
status: New → In Progress
Changed in manila:
milestone: none → pike-rc1
importance: Undecided → Low
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila (master)

Reviewed: https://review.openstack.org/491848
Committed: https://git.openstack.org/cgit/openstack/manila/commit/?id=5e8df296abcc2f08aac085b09aeae202508d5dc7
Submitter: Jenkins
Branch: master

commit 5e8df296abcc2f08aac085b09aeae202508d5dc7
Author: Goutham Pacha Ravi <email address hidden>
Date: Tue Jul 11 11:03:45 2017 -0700

    NetApp cDOT: Fix security style for CIFS shares

    If the backing FlexVol security style is configured
    incorrectly, end users cannot write to their manila
    shares.

    Change-Id: I12c85c54c7318592ac0b34efe3624d175d2e6976
    Closes-Bug: #1696000

Changed in manila:
status: In Progress → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to manila (stable/ocata)

Fix proposed to branch: stable/ocata
Review: https://review.openstack.org/492323

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/manila 5.0.0.0rc1

This issue was fixed in the openstack/manila 5.0.0.0rc1 release candidate.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila (stable/ocata)

Reviewed: https://review.openstack.org/492323
Committed: https://git.openstack.org/cgit/openstack/manila/commit/?id=48b5c91ad73e74a8e35b3649b0433ba86d6bdf06
Submitter: Jenkins
Branch: stable/ocata

commit 48b5c91ad73e74a8e35b3649b0433ba86d6bdf06
Author: Goutham Pacha Ravi <email address hidden>
Date: Tue Jul 11 11:03:45 2017 -0700

    NetApp cDOT: Fix security style for CIFS shares

    If the backing FlexVol security style is configured
    incorrectly, end users cannot write to their manila
    shares.

    Change-Id: I12c85c54c7318592ac0b34efe3624d175d2e6976
    Closes-Bug: #1696000
    (cherry picked from commit 5e8df296abcc2f08aac085b09aeae202508d5dc7)

tags: added: in-stable-ocata
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix included in openstack/manila 4.0.1

This issue was fixed in the openstack/manila 4.0.1 release.

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to manila (driverfixes/newton)

Fix proposed to branch: driverfixes/newton
Review: https://review.openstack.org/587686

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to manila (driverfixes/newton)

Reviewed: https://review.openstack.org/587686
Committed: https://git.openstack.org/cgit/openstack/manila/commit/?id=0aecd7d9943ae435dcb9b95f74292d5debea7ae5
Submitter: Zuul
Branch: driverfixes/newton

commit 0aecd7d9943ae435dcb9b95f74292d5debea7ae5
Author: Goutham Pacha Ravi <email address hidden>
Date: Tue Jul 11 11:03:45 2017 -0700

    NetApp cDOT: Fix security style for CIFS shares

    If the backing FlexVol security style is configured
    incorrectly, end users cannot write to their manila
    shares.

    Change-Id: I12c85c54c7318592ac0b34efe3624d175d2e6976
    Closes-Bug: #1696000
    (cherry picked from commit 5e8df296abcc2f08aac085b09aeae202508d5dc7)
    (cherry picked from commit 48b5c91ad73e74a8e35b3649b0433ba86d6bdf06)

tags: added: in-driverfixes-newton
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.