[ 
https://issues.apache.org/jira/browse/HDDS-11064?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
 ]

Jyotirmoy Sinha updated HDDS-11064:
-----------------------------------
    Description: 
Info of the pre-upgrade volume and bucket -
{code:java}
# ozone sh bucket info srcvolsnap/srcbucksnap
{
  "metadata" : { },
  "volumeName" : "srcvolsnap",
  "name" : "srcbucksnap",
  "storageType" : "DISK",
  "versioning" : false,
  "usedBytes" : 647262,
  "usedNamespace" : 1,
  "creationTime" : "2024-06-24T07:26:41.045Z",
  "modificationTime" : "2024-06-24T07:26:41.045Z",
  "sourcePathExist" : true,
  "quotaInBytes" : -1,
  "quotaInNamespace" : -1,
  "bucketLayout" : "LEGACY",
  "link" : false
}
# ozone sh volume info srcvolsnap
{
  "metadata" : { },
  "name" : "srcvolsnap",
  "admin" : "[email protected]",
  "owner" : "root",
  "quotaInBytes" : -1,
  "quotaInNamespace" : -1,
  "usedNamespace" : 1,
  "creationTime" : "2024-06-24T07:26:35.955Z",
  "modificationTime" : "2024-06-24T07:26:35.955Z",
  "acls" : [ {
    "type" : "USER",
    "name" : "root",
    "aclScope" : "ACCESS",
    "aclList" : [ "ALL" ]
  }, {
    "type" : "GROUP",
    "name" : "root",
    "aclScope" : "ACCESS",
    "aclList" : [ "ALL" ]
  } ],
  "refCount" : 0
}{code}
Here the volume admin is - 
{code:java}
"admin" : "[email protected]"{code}
After upgrade it is not recognizing the shorthand principal of *_user_* and 
hence throwing error -
{code:java}
# kinit -kt /path_to_keytab/user.keytab user
# ozone sh snapshot create srcvolsnap/srcbucksnap snap1
PERMISSION_DENIED Only bucket owners and Ozone admins can create snapshots 
{code}

  was:
Info of the pre-upgrade volume and bucket -
{code:java}
 [[email protected] ~]# ozone sh bucket info 
srcvolsnap/srcbucksnap
{
  "metadata" : { },
  "volumeName" : "srcvolsnap",
  "name" : "srcbucksnap",
  "storageType" : "DISK",
  "versioning" : false,
  "usedBytes" : 647262,
  "usedNamespace" : 1,
  "creationTime" : "2024-06-24T07:26:41.045Z",
  "modificationTime" : "2024-06-24T07:26:41.045Z",
  "sourcePathExist" : true,
  "quotaInBytes" : -1,
  "quotaInNamespace" : -1,
  "bucketLayout" : "LEGACY",
  "link" : false
}
[[email protected] ~]# ozone sh volume info 
srcvolsnap
{
  "metadata" : { },
  "name" : "srcvolsnap",
  "admin" : "[email protected]",
  "owner" : "root",
  "quotaInBytes" : -1,
  "quotaInNamespace" : -1,
  "usedNamespace" : 1,
  "creationTime" : "2024-06-24T07:26:35.955Z",
  "modificationTime" : "2024-06-24T07:26:35.955Z",
  "acls" : [ {
    "type" : "USER",
    "name" : "root",
    "aclScope" : "ACCESS",
    "aclList" : [ "ALL" ]
  }, {
    "type" : "GROUP",
    "name" : "root",
    "aclScope" : "ACCESS",
    "aclList" : [ "ALL" ]
  } ],
  "refCount" : 0
}{code}
Here the volume admin is - 
{code:java}
"admin" : "[email protected]"{code}

After upgrade it is not recognizing the shorthand principal of *_user_* and 
hence throwing error -
{code:java}
# kinit -kt /path_to_keytab/user.keytab user
# ozone sh snapshot create srcvolsnap/srcbucksnap snap1
PERMISSION_DENIED Only bucket owners and Ozone admins can create snapshots 
{code}


> Snapshot creation failing with "PERMISSION_DENIED" error on a bucket created 
> pre-upgrade
> ----------------------------------------------------------------------------------------
>
>                 Key: HDDS-11064
>                 URL: https://issues.apache.org/jira/browse/HDDS-11064
>             Project: Apache Ozone
>          Issue Type: Bug
>          Components: Snapshot
>            Reporter: Jyotirmoy Sinha
>            Priority: Major
>              Labels: ozone-snapshot
>
> Info of the pre-upgrade volume and bucket -
> {code:java}
> # ozone sh bucket info srcvolsnap/srcbucksnap
> {
>   "metadata" : { },
>   "volumeName" : "srcvolsnap",
>   "name" : "srcbucksnap",
>   "storageType" : "DISK",
>   "versioning" : false,
>   "usedBytes" : 647262,
>   "usedNamespace" : 1,
>   "creationTime" : "2024-06-24T07:26:41.045Z",
>   "modificationTime" : "2024-06-24T07:26:41.045Z",
>   "sourcePathExist" : true,
>   "quotaInBytes" : -1,
>   "quotaInNamespace" : -1,
>   "bucketLayout" : "LEGACY",
>   "link" : false
> }
> # ozone sh volume info srcvolsnap
> {
>   "metadata" : { },
>   "name" : "srcvolsnap",
>   "admin" : "[email protected]",
>   "owner" : "root",
>   "quotaInBytes" : -1,
>   "quotaInNamespace" : -1,
>   "usedNamespace" : 1,
>   "creationTime" : "2024-06-24T07:26:35.955Z",
>   "modificationTime" : "2024-06-24T07:26:35.955Z",
>   "acls" : [ {
>     "type" : "USER",
>     "name" : "root",
>     "aclScope" : "ACCESS",
>     "aclList" : [ "ALL" ]
>   }, {
>     "type" : "GROUP",
>     "name" : "root",
>     "aclScope" : "ACCESS",
>     "aclList" : [ "ALL" ]
>   } ],
>   "refCount" : 0
> }{code}
> Here the volume admin is - 
> {code:java}
> "admin" : "[email protected]"{code}
> After upgrade it is not recognizing the shorthand principal of *_user_* and 
> hence throwing error -
> {code:java}
> # kinit -kt /path_to_keytab/user.keytab user
> # ozone sh snapshot create srcvolsnap/srcbucksnap snap1
> PERMISSION_DENIED Only bucket owners and Ozone admins can create snapshots 
> {code}



--
This message was sent by Atlassian Jira
(v8.20.10#820010)

---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to