On Tuesday, December 3, 2019, Ivan Apolonio <[email protected]> wrote:
> Hello Amit. Thanks for you reply. > > This is the content of /etc/sudoers.d/50_vdsm file (it's the default > generated by ovirt install): > > Cmnd_Alias VDSM_LIFECYCLE = \ > /usr/sbin/dmidecode -s system-uuid > Cmnd_Alias VDSM_STORAGE = \ > /usr/sbin/fsck -p *, \ > /usr/sbin/tune2fs -j *, \ > /usr/sbin/mkfs -q -j *, \ > /usr/bin/kill, \ > /usr/bin/chown vdsm\:qemu *, \ > /usr/bin/chown vdsm\:kvm *, \ > /usr/sbin/iscsiadm *, \ > /usr/sbin/lvm, \ > /usr/bin/setsid /usr/bin/ionice -c ? -n ? /usr/bin/su vdsm -s /bin/sh > -c /usr/libexec/vdsm/spmprotect.sh*, \ > /usr/sbin/service vdsmd *, \ > /usr/sbin/reboot -f > > vdsm ALL=(ALL) NOPASSWD: VDSM_LIFECYCLE, VDSM_STORAGE > Defaults:vdsm !requiretty > Defaults:vdsm !syslog This line shuts logging, worth to comment it out during check. Plus, do you have an #includedir setting in your /etc/sudoers file? The vdsm.log snippet seems later than the error in the engine.log, could you provide one covering the failing attempt? > I was pretty curious about the format of the line "/usr/bin/setsid > /usr/bin/ionice -c ? -n ? /usr/bin/su vdsm -s /bin/sh -c > /usr/libexec/vdsm/spmprotect.sh*", but looking at source code ( > https://github.com/oVirt/vdsm/blob/master/static/etc/sudoers.d/50_vdsm.in) > it looks to be just like that. If I need to change anything on this file, > it looks that there's some bug on vdsm package. > > In other hand, I watched the /var/log/secure file while I was trying to > attach a Datacenter to ISO Domain and it didn't showed anything new, > meaning that the referred "ionice" command was not executed via sudo by > vdsm. If it's is true, that could explain the "permission denied" error. > > About the NFS export, it is exactly the same as parameters as Data Domain > exports (which works perfectly): > > exportfs -v > /storage/vm 172.31.17.0/24(sync,wdelay,hide,no_subtree_check,sec=sys, > rw,secure,root_squash,no_all_squash) > /storage/vm 172.31.48.0/24(sync,wdelay,hide,no_subtree_check,sec=sys, > rw,secure,root_squash,no_all_squash) > /storage/iso <world>(sync,wdelay,hide,no_subtree_check,sec=sys,rw, > secure,root_squash,no_all_squash) > > > What else do I need to check? > Thanks > Ivan > _______________________________________________ > Users mailing list -- [email protected] > To unsubscribe send an email to [email protected] > Privacy Statement: https://www.ovirt.org/site/privacy-policy/ > oVirt Code of Conduct: https://www.ovirt.org/community/about/community- > guidelines/ > List Archives: https://lists.ovirt.org/archives/list/[email protected]/ > message/BPEKZ4JEDMLLMDXCJWX5IOIKYIU5NRVF/ >
_______________________________________________ Users mailing list -- [email protected] To unsubscribe send an email to [email protected] Privacy Statement: https://www.ovirt.org/site/privacy-policy/ oVirt Code of Conduct: https://www.ovirt.org/community/about/community-guidelines/ List Archives: https://lists.ovirt.org/archives/list/[email protected]/message/RY7ZDRFLXKCM6WTKWJANQXE6PZVLJLMD/

