Public bug reported:
Binary package hint: euca2ools
I have a security group and have authorized traffic from two other
groups to it, "web" and "lds":
andr...@nsn2:~$ euca-describe-groups ssh
GROUP admin ssh Allows 22/tcp from everywhere
PERMISSION admin ssh ALLOWS tcp 22 22 FROM CIDR
0.0.0.0/0
PERMISSION admin ssh ALLOWS tcp 0 65535 GRPNAME web
PERMISSION admin ssh ALLOWS udp 0 65535 GRPNAME web
PERMISSION admin ssh ALLOWS icmp -1 -1 GRPNAME web
PERMISSION admin ssh ALLOWS tcp 0 65535 GRPNAME lds
PERMISSION admin ssh ALLOWS udp 0 65535 GRPNAME lds
PERMISSION admin ssh ALLOWS icmp -1 -1 GRPNAME lds
Now I remove this authorization for the "lds" group:
andr...@nsn2:~$ euca-revoke -o lds -u admin ssh
GROUP ssh
PERMISSION ssh ALLOWS USER admin GRPNAME lds
Listing the "ssh" group now shows that the "lds" group is still there and the
"web" one was removed instead:
andr...@nsn2:~$ euca-describe-groups ssh
GROUP admin ssh Allows 22/tcp from everywhere
PERMISSION admin ssh ALLOWS tcp 22 22 FROM CIDR
0.0.0.0/0
PERMISSION admin ssh ALLOWS tcp 0 65535 GRPNAME lds
PERMISSION admin ssh ALLOWS udp 0 65535 GRPNAME lds
PERMISSION admin ssh ALLOWS icmp -1 -1 GRPNAME lds
This is against a cloud controller on lucid, running:
$ dpkg -l|grep eucalyptus
ii eucalyptus-cc 1.6.2-0ubuntu30.3
Elastic Utility Computing Architecture - Clu
ii eucalyptus-cloud 1.6.2-0ubuntu30.3
Elastic Utility Computing Architecture - Clo
ii eucalyptus-common 1.6.2-0ubuntu30.3
Elastic Utility Computing Architecture - Com
ii eucalyptus-gl 1.6.2-0ubuntu30.3
Elastic Utility Computing Architecture - Log
ii eucalyptus-java-common 1.6.2-0ubuntu30.3
Elastic Utility Computing Architecture - Com
ii eucalyptus-sc 1.6.2-0ubuntu30.3
Elastic Utility Computing Architecture - Sto
ii eucalyptus-walrus 1.6.2-0ubuntu30.3
Elastic Utility Computing Architecture - Wal
ii libeucalyptus-commons-ext-java 0.5.0-0ubuntu2
Eucalyptus commons external Java library
The client has this version os euca2ools installed and is also lucid:
ii euca2ools 1.2-0ubuntu10
managing cloud instances for Eucalyptus
** Affects: eucalyptus
Importance: Undecided
Status: New
** Affects: euca2ools (Ubuntu)
Importance: Undecided
Status: New
--
euca-revoke removes the wrong group authorization
https://bugs.launchpad.net/bugs/608623
You received this bug notification because you are a member of Ubuntu
Server Team, which is subscribed to euca2ools in ubuntu.
--
Ubuntu-server-bugs mailing list
Ubuntu-server-bugs@lists.ubuntu.com
Modify settings or unsubscribe at:
https://lists.ubuntu.com/mailman/listinfo/ubuntu-server-bugs
