Jyotirmoy Sinha created HDDS-11064:
--------------------------------------

             Summary: Snapshot creation failing with "PERMISSION_DENIED" error 
on a bucket created pre-upgrade
                 Key: HDDS-11064
                 URL: https://issues.apache.org/jira/browse/HDDS-11064
             Project: Apache Ozone
          Issue Type: Bug
          Components: Snapshot
            Reporter: Jyotirmoy Sinha


Info of the pre-upgrade volume and bucket -
{code:java}
 [[email protected] ~]# ozone sh bucket info 
srcvolsnap/srcbucksnap
{
  "metadata" : { },
  "volumeName" : "srcvolsnap",
  "name" : "srcbucksnap",
  "storageType" : "DISK",
  "versioning" : false,
  "usedBytes" : 647262,
  "usedNamespace" : 1,
  "creationTime" : "2024-06-24T07:26:41.045Z",
  "modificationTime" : "2024-06-24T07:26:41.045Z",
  "sourcePathExist" : true,
  "quotaInBytes" : -1,
  "quotaInNamespace" : -1,
  "bucketLayout" : "LEGACY",
  "link" : false
}
[[email protected] ~]# ozone sh volume info 
srcvolsnap
{
  "metadata" : { },
  "name" : "srcvolsnap",
  "admin" : "[email protected]",
  "owner" : "root",
  "quotaInBytes" : -1,
  "quotaInNamespace" : -1,
  "usedNamespace" : 1,
  "creationTime" : "2024-06-24T07:26:35.955Z",
  "modificationTime" : "2024-06-24T07:26:35.955Z",
  "acls" : [ {
    "type" : "USER",
    "name" : "root",
    "aclScope" : "ACCESS",
    "aclList" : [ "ALL" ]
  }, {
    "type" : "GROUP",
    "name" : "root",
    "aclScope" : "ACCESS",
    "aclList" : [ "ALL" ]
  } ],
  "refCount" : 0
}{code}
Here the volume admin is - 
{code:java}
"admin" : "[email protected]"{code}

After upgrade it is not recognizing the shorthand principal of *_user_* and 
hence throwing error -
{code:java}
# kinit -kt /path_to_keytab/user.keytab user
# ozone sh snapshot create srcvolsnap/srcbucksnap snap1
PERMISSION_DENIED Only bucket owners and Ozone admins can create snapshots 
{code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to