[Ocfs2-users] Permission denied on ocfs2 cluster

Martin Sautter martin.a.sautter at oracle.com
Thu Mar 22 05:21:28 PDT 2012


with ACFS I run into the same error.
deactivating selinux solved the problem.
change the status in the file /etc/selinux/config to "permissive"
and/or you can change the mode using: setenforce [Enforcing | Permissive]

Regards
Martin

On 16.03.2012 16:21, Sunil Mushran wrote:
> Could be selinux related. I mean it is a permission issue. So you have to look at all the security regimes. rwx, posix acl, selinux, etc.
>
> On Mar 16, 2012, at 8:00 AM, зоррыч<zorro at megatrone.ru>  wrote:
>
>> Any idea?
>>
>>
>>
>> -----Original Message-----
>> From: ocfs2-users-bounces at oss.oracle.com
>> [mailto:ocfs2-users-bounces at oss.oracle.com] On Behalf Of зоррыч
>> Sent: Thursday, March 15, 2012 11:26 PM
>> To: 'Sunil Mushran'
>> Cc: ocfs2-users at oss.oracle.com
>> Subject: Re: [Ocfs2-users] Permission denied on ocfs2 cluster
>>
>> [root at noc-1-synt /]# ls -lh | grep ocfs
>> drwxr-xr-x.   3 root root 3.9K Mar 15 02:20 ocfs
>> [root at noc-1-synt /]# chmod -R gou+rwx ./ocfs/ [root at noc-1-synt /]# ls -lh |
>> grep ocfs
>> drwxrwxrwx.   3 root root 3.9K Mar 15 02:20 ocfs
>> [root at noc-1-synt /]# cd ./ocfs/
>> [root at noc-1-synt ocfs]# mkdir 1233
>> mkdir: cannot create directory `1233': Permission denied [root at noc-1-synt
>> ocfs]#
>> Strace:
>> [root at noc-1-synt ocfs]# strace mkdir 1233 execve("/bin/mkdir", ["mkdir",
>> "1233"], [/* 28 vars */]) = 0
>> brk(0)                                  = 0x2132000
>> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
>> 0x7fbd67514000
>> access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or
>> directory)
>> open("/etc/ld.so.cache", O_RDONLY)      = 3
>> fstat(3, {st_mode=S_IFREG|0644, st_size=45938, ...}) = 0 mmap(NULL, 45938,
>> PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbd67508000
>> close(3)                                = 0
>> open("/lib64/libselinux.so.1", O_RDONLY) = 3 read(3,
>> "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0PX\0D2\0\0\0"...,
>> 832) = 832
>> fstat(3, {st_mode=S_IFREG|0755, st_size=124624, ...}) = 0 mmap(0x3244000000,
>> 2221912, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE, 3, 0) =
>> 0x3244000000 mprotect(0x324401d000, 2093056, PROT_NONE) = 0
>> mmap(0x324421c000, 8192, PROT_READ|PROT_WRITE,
>> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c000) = 0x324421c000
>> mmap(0x324421e000, 1880, PROT_READ|PROT_WRITE,
>> MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x324421e000
>> close(3)                                = 0
>> open("/lib64/libc.so.6", O_RDONLY)      = 3
>> read(3,
>> "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\355\201B2\0\0\0"...,
>> 832) = 832
>> fstat(3, {st_mode=S_IFREG|0755, st_size=1979000, ...}) = 0
>> mmap(0x3242800000, 3803304, PROT_READ|PROT_EXEC, MAP_PRIVATE|MAP_DENYWRITE,
>> 3, 0) = 0x3242800000 mprotect(0x3242997000, 2097152, PROT_NONE) = 0
>> mmap(0x3242b97000, 20480, PROT_READ|PROT_WRITE,
>> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x197000) = 0x3242b97000
>> mmap(0x3242b9c000, 18600, PROT_READ|PROT_WRITE,
>> MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x3242b9c000
>> close(3)                                = 0
>> open("/lib64/libdl.so.2", O_RDONLY)     = 3
>> read(3,
>> "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\300B2\0\0\0"..., 832)
>> = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=22536, ...}) = 0 mmap(NULL,
>> 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
>> 0x7fbd67507000 mmap(0x3242c00000, 2109696, PROT_READ|PROT_EXEC,
>> MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3242c00000 mprotect(0x3242c02000,
>> 2097152, PROT_NONE) = 0 mmap(0x3242e02000, 8192, PROT_READ|PROT_WRITE,
>> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x3242e02000
>> close(3)                                = 0
>> mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
>> 0x7fbd67505000 arch_prctl(ARCH_SET_FS, 0x7fbd675057a0) = 0
>> mprotect(0x324421c000, 4096, PROT_READ) = 0 mprotect(0x3242b97000, 16384,
>> PROT_READ) = 0 mprotect(0x3242e02000, 4096, PROT_READ) = 0
>> mprotect(0x324261f000, 4096, PROT_READ) = 0
>> munmap(0x7fbd67508000, 45938)           = 0
>> statfs("/selinux", {f_type=0xf97cff8c, f_bsize=4096, f_blocks=0, f_bfree=0,
>> f_bavail=0, f_files=0, f_ffree=0, f_fsid={0, 0}, f_namelen=255,
>> f_frsize=4096}) = 0
>> brk(0)                                  = 0x2132000
>> brk(0x2153000)                          = 0x2153000
>> open("/usr/lib/locale/locale-archive", O_RDONLY) = 3 fstat(3,
>> {st_mode=S_IFREG|0644, st_size=99158704, ...}) = 0 mmap(NULL, 99158704,
>> PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fbd61674000
>> close(3)                                = 0
>> mkdir("1233", 0777)                     = -1 EACCES (Permission denied)
>> open("/usr/share/locale/locale.alias", O_RDONLY) = 3 fstat(3,
>> {st_mode=S_IFREG|0644, st_size=2512, ...}) = 0 mmap(NULL, 4096,
>> PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) = 0x7fbd67513000
>> read(3, "# Locale name alias data base.\n#"..., 4096) = 2512
>> read(3, "", 4096)                       = 0
>> close(3)                                = 0
>> munmap(0x7fbd67513000, 4096)            = 0
>> open("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/coreutils.mo", O_RDONLY) =
>> -1 ENOENT (No such file or directory)
>> open("/usr/share/locale/en_US.utf8/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1
>> ENOENT (No such file or directory)
>> open("/usr/share/locale/en_US/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1
>> ENOENT (No such file or directory)
>> open("/usr/share/locale/en.UTF-8/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1
>> ENOENT (No such file or directory)
>> open("/usr/share/locale/en.utf8/LC_MESSAGES/coreutils.mo", O_RDONLY) = -1
>> ENOENT (No such file or directory)
>> open("/usr/share/locale/en/LC_MESSAGES/coreutils.mo", O_RDONLY) = 3 fstat(3,
>> {st_mode=S_IFREG|0644, st_size=435, ...}) = 0 mmap(NULL, 435, PROT_READ,
>> MAP_PRIVATE, 3, 0) = 0x7fbd67513000
>> close(3)                                = 0
>> write(2, "mkdir: ", 7mkdir: )                  = 7
>> write(2, "cannot create directory `1233'", 30cannot create directory `1233')
>> = 30 open("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) =
>> -1 ENOENT (No such file or directory)
>> open("/usr/share/locale/en_US.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1
>> ENOENT (No such file or directory)
>> open("/usr/share/locale/en_US/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT
>> (No such file or directory)
>> open("/usr/share/locale/en.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT
>> (No such file or directory)
>> open("/usr/share/locale/en.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT
>> (No such file or directory) open("/usr/share/locale/en/LC_MESSAGES/libc.mo",
>> O_RDONLY) = -1 ENOENT (No such file or directory)
>> write(2, ": Permission denied", 19: Permission denied)     = 19
>> write(2, "\n", 1
>> )                       = 1
>> close(1)                                = 0
>> close(2)                                = 0
>> exit_group(1)                           = ?
>> [root at noc-1-synt ocfs]#
>>
>>
>>
>> -----Original Message-----
>> From: Sunil Mushran [mailto:sunil.mushran at oracle.com]
>> Sent: Thursday, March 15, 2012 10:48 PM
>> To: зоррыч
>> Cc: ocfs2-users at oss.oracle.com
>> Subject: Re: [Ocfs2-users] Permission denied on ocfs2 cluster
>>
>> Do you have permissions? Check permissions on the directory you are
>> creating.
>>
>> On 03/15/2012 11:16 AM, зоррыч wrote:
>>> [root at noc-1-synt ocfs]# strace mkdir 12 execve("/bin/mkdir", ["mkdir",
>>> "12"], [/* 28 vars */]) = 0
>>> brk(0)                                  = 0x1178000
>>> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
>>> 0) =
>>> 0x7fe958f4b000
>>> access("/etc/ld.so.preload", R_OK)      = -1 ENOENT (No such file or
>>> directory)
>>> open("/etc/ld.so.cache", O_RDONLY)      = 3
>>> fstat(3, {st_mode=S_IFREG|0644, st_size=45938, ...}) = 0 mmap(NULL,
>>> 45938, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe958f3f000
>>> close(3)                                = 0
>>> open("/lib64/libselinux.so.1", O_RDONLY) = 3 read(3,
>>> "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0PX\0D2\0\0\0"...,
>>> 832) = 832
>>> fstat(3, {st_mode=S_IFREG|0755, st_size=124624, ...}) = 0
>>> mmap(0x3244000000, 2221912, PROT_READ|PROT_EXEC,
>>> MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3244000000 mprotect(0x324401d000,
>>> 2093056, PROT_NONE) = 0 mmap(0x324421c000, 8192, PROT_READ|PROT_WRITE,
>>> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x1c000) = 0x324421c000
>>> mmap(0x324421e000, 1880, PROT_READ|PROT_WRITE,
>>> MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) = 0x324421e000
>>> close(3)                                = 0
>>> open("/lib64/libc.so.6", O_RDONLY)      = 3
>>> read(3,
>>> "\177ELF\2\1\1\3\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\360\355\201B2\0\0\0"..
>>> .,
>>> 832) = 832
>>> fstat(3, {st_mode=S_IFREG|0755, st_size=1979000, ...}) = 0
>>> mmap(0x3242800000, 3803304, PROT_READ|PROT_EXEC,
>>> MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3242800000 mprotect(0x3242997000,
>>> 2097152, PROT_NONE) = 0 mmap(0x3242b97000, 20480,
>>> PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3,
>>> 0x197000) = 0x3242b97000 mmap(0x3242b9c000, 18600,
>>> PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_FIXED|MAP_ANONYMOUS, -1, 0) =
>>> 0x3242b9c000
>>> close(3)                                = 0
>>> open("/lib64/libdl.so.2", O_RDONLY)     = 3
>>> read(3,
>>> "\177ELF\2\1\1\0\0\0\0\0\0\0\0\0\3\0>\0\1\0\0\0\340\r\300B2\0\0\0"...,
>>> 832) = 832 fstat(3, {st_mode=S_IFREG|0755, st_size=22536, ...}) = 0
>>> mmap(NULL, 4096, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
>>> 0) =
>>> 0x7fe958f3e000
>>> mmap(0x3242c00000, 2109696, PROT_READ|PROT_EXEC,
>>> MAP_PRIVATE|MAP_DENYWRITE, 3, 0) = 0x3242c00000 mprotect(0x3242c02000,
>>> 2097152, PROT_NONE) = 0 mmap(0x3242e02000, 8192, PROT_READ|PROT_WRITE,
>>> MAP_PRIVATE|MAP_FIXED|MAP_DENYWRITE, 3, 0x2000) = 0x3242e02000
>>> close(3)                                = 0
>>> mmap(NULL, 8192, PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1,
>>> 0) =
>>> 0x7fe958f3c000
>>> arch_prctl(ARCH_SET_FS, 0x7fe958f3c7a0) = 0 mprotect(0x324421c000,
>>> 4096, PROT_READ) = 0 mprotect(0x3242b97000, 16384, PROT_READ) = 0
>>> mprotect(0x3242e02000, 4096, PROT_READ) = 0 mprotect(0x324261f000,
>>> 4096, PROT_READ) = 0
>>> munmap(0x7fe958f3f000, 45938)           = 0
>>> statfs("/selinux", {f_type=0xf97cff8c, f_bsize=4096, f_blocks=0,
>>> f_bfree=0, f_bavail=0, f_files=0, f_ffree=0, f_fsid={0, 0},
>>> f_namelen=255,
>>> f_frsize=4096}) = 0
>>> brk(0)                                  = 0x1178000
>>> brk(0x1199000)                          = 0x1199000
>>> open("/usr/lib/locale/locale-archive", O_RDONLY) = 3 fstat(3,
>>> {st_mode=S_IFREG|0644, st_size=99158704, ...}) = 0 mmap(NULL,
>>> 99158704, PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe9530ab000
>>> close(3)                                = 0
>>> mkdir("12", 0777)                       = -1 EACCES (Permission denied)
>>> open("/usr/share/locale/locale.alias", O_RDONLY) = 3 fstat(3,
>>> {st_mode=S_IFREG|0644, st_size=2512, ...}) = 0 mmap(NULL, 4096,
>>> PROT_READ|PROT_WRITE, MAP_PRIVATE|MAP_ANONYMOUS, -1, 0) =
>>> 0x7fe958f4a000 read(3, "# Locale name alias data base.\n#"..., 4096) =
>>> 2512
>>> read(3, "", 4096)                       = 0
>>> close(3)                                = 0
>>> munmap(0x7fe958f4a000, 4096)            = 0
>>> open("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/coreutils.mo",
>>> O_RDONLY) =
>>> -1 ENOENT (No such file or directory)
>>> open("/usr/share/locale/en_US.utf8/LC_MESSAGES/coreutils.mo",
>>> O_RDONLY) = -1 ENOENT (No such file or directory)
>>> open("/usr/share/locale/en_US/LC_MESSAGES/coreutils.mo", O_RDONLY) =
>>> -1 ENOENT (No such file or directory)
>>> open("/usr/share/locale/en.UTF-8/LC_MESSAGES/coreutils.mo", O_RDONLY)
>>> = -1 ENOENT (No such file or directory)
>>> open("/usr/share/locale/en.utf8/LC_MESSAGES/coreutils.mo", O_RDONLY) =
>>> -1 ENOENT (No such file or directory)
>>> open("/usr/share/locale/en/LC_MESSAGES/coreutils.mo", O_RDONLY) = 3
>>> fstat(3, {st_mode=S_IFREG|0644, st_size=435, ...}) = 0 mmap(NULL, 435,
>>> PROT_READ, MAP_PRIVATE, 3, 0) = 0x7fe958f4a000
>>> close(3)                                = 0
>>> write(2, "mkdir: ", 7mkdir: )                  = 7
>>> write(2, "cannot create directory `12'", 28cannot create directory
>>> `12') =
>>> 28
>>> open("/usr/share/locale/en_US.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) =
>>> -1 ENOENT (No such file or directory)
>>> open("/usr/share/locale/en_US.utf8/LC_MESSAGES/libc.mo", O_RDONLY) =
>>> -1 ENOENT (No such file or directory)
>>> open("/usr/share/locale/en_US/LC_MESSAGES/libc.mo", O_RDONLY) = -1
>>> ENOENT (No such file or directory)
>>> open("/usr/share/locale/en.UTF-8/LC_MESSAGES/libc.mo", O_RDONLY) = -1
>>> ENOENT (No such file or directory)
>>> open("/usr/share/locale/en.utf8/LC_MESSAGES/libc.mo", O_RDONLY) = -1
>>> ENOENT (No such file or directory)
>>> open("/usr/share/locale/en/LC_MESSAGES/libc.mo", O_RDONLY) = -1 ENOENT
>>> (No such file or directory)
>>> write(2, ": Permission denied", 19: Permission denied)     = 19
>>> write(2, "\n", 1
>>> )                       = 1
>>> close(1)                                = 0
>>> close(2)                                = 0
>>> exit_group(1)                           = ?
>>> [root at noc-1-synt ocfs]#
>>>
>>>
>>>
>>>
>>> -----Original Message-----
>>> From: Sunil Mushran [mailto:sunil.mushran at oracle.com]
>>> Sent: Thursday, March 15, 2012 8:20 PM
>>> To: ??????
>>> Cc: ocfs2-users at oss.oracle.com
>>> Subject: Re: [Ocfs2-users] Permission denied on ocfs2 cluster
>>>
>>> strace may show more. I would first confirm that my perms are correct.
>>>
>>> On 03/15/2012 07:58 AM, ?????? wrote:
>>>> I am testing the scheme of drbd and ocfs2
>>>>
>>>> If you attempt to write to the cluster error:
>>>>
>>>> [root at noc-1-m77 share]# mkdir 12
>>>>
>>>> mkdir: cannot create directory `12': Permission denied
>>>>
>>>> [root at noc-1-m77 share]#
>>>>
>>>> Config:
>>>>
>>>> [root at noc-1-m77 /]# cat /etc/ocfs2/cluster.conf
>>>>
>>>> cluster:
>>>>
>>>> node_count = 2
>>>>
>>>> name = cluster-ocfs2
>>>>
>>>> node:
>>>>
>>>> ip_port = 7777
>>>>
>>>> ip_address = 10.1.20.10
>>>>
>>>> number = 0
>>>>
>>>> name = noc-1-synt.rutube.ru
>>>>
>>>> cluster = cluster-ocfs2
>>>>
>>>> node:
>>>>
>>>> ip_port = 7777
>>>>
>>>> ip_address = 10.2.20.9
>>>>
>>>> number = 1
>>>>
>>>> name = noc-1-m77.rutube.ru
>>>>
>>>> cluster = cluster-ocfs2
>>>>
>>>> logs:
>>>>
>>>> Mar 15 05:42:04 noc-1-synt kernel: OCFS2 1.5.0
>>>>
>>>> Mar 15 05:42:04 noc-1-synt kernel: o2dlm: Nodes in domain
>>>> 5426CCF9AC414CD59E78F3AE48B9DE2C: 1
>>>>
>>>> Mar 15 05:42:04 noc-1-synt kernel: ocfs2: Mounting device (147,0) on
>>>> (node 1, slot 0) with ordered data mode.
>>>>
>>>> Mar 15 05:42:07 noc-1-synt kernel: o2net: accepted connection from
>>>> node noc-1-m77.rutube.ru (num 2) at 10.2.20.9:7777
>>>>
>>>> Mar 15 05:42:11 noc-1-synt kernel: o2dlm: Node 2 joins domain
>>>> 5426CCF9AC414CD59E78F3AE48B9DE2C
>>>>
>>>> Mar 15 05:42:11 noc-1-synt kernel: o2dlm: Nodes in domain
>>>> 5426CCF9AC414CD59E78F3AE48B9DE2C: 1 2
>>>>
>>>> Mar 15 05:50:54 noc-1-synt kernel: o2dlm: Node 2 leaves domain
>>>> 5426CCF9AC414CD59E78F3AE48B9DE2C
>>>>
>>>> Mar 15 05:50:54 noc-1-synt kernel: o2dlm: Nodes in domain
>>>> 5426CCF9AC414CD59E78F3AE48B9DE2C: 1
>>>>
>>>> Mar 15 05:50:56 noc-1-synt kernel: o2net: connection to node
>>>> noc-1-m77.rutube.ru (num 2) at 10.2.20.9:7777 shutdown, state 8
>>>>
>>>> Mar 15 05:50:56 noc-1-synt kernel: o2net: no longer connected to node
>>>> noc-1-m77.rutube.ru (num 2) at 10.2.20.9:7777
>>>>
>>>> Mar 15 05:51:12 noc-1-synt kernel: ocfs2: Unmounting device (147,0)
>>>> on (node 1)
>>>>
>>>> Mar 15 05:51:45 noc-1-synt kernel: o2net: accepted connection from
>>>> node noc-1-m77.rutube.ru (num 2) at 10.2.20.9:7777
>>>>
>>>> Mar 15 05:51:47 noc-1-synt kernel: o2dlm: Nodes in domain
>>>> 5426CCF9AC414CD59E78F3AE48B9DE2C: 1 2
>>>>
>>>> Mar 15 05:51:47 noc-1-synt kernel: ocfs2: Mounting device (147,0) on
>>>> (node 1, slot 1) with ordered data mode.
>>>>
>>>> How do I fix this?
>>>>
>>>>
>>>>
>>>> _______________________________________________
>>>> Ocfs2-users mailing list
>>>> Ocfs2-users at oss.oracle.com
>>>> http://oss.oracle.com/mailman/listinfo/ocfs2-users
>>
>> _______________________________________________
>> Ocfs2-users mailing list
>> Ocfs2-users at oss.oracle.com
>> http://oss.oracle.com/mailman/listinfo/ocfs2-users
>>
>>
>>
>> _______________________________________________
>> Ocfs2-users mailing list
>> Ocfs2-users at oss.oracle.com
>> http://oss.oracle.com/mailman/listinfo/ocfs2-users
> _______________________________________________
> Ocfs2-users mailing list
> Ocfs2-users at oss.oracle.com
> http://oss.oracle.com/mailman/listinfo/ocfs2-users



More information about the Ocfs2-users mailing list