Page MenuHomePhabricator

Cannot edit my files on Tools Labs via group
Closed, ResolvedPublic

Description

I can not edit my tools files via group permission anymore. This is new since the last Labs outage a few hours ago; maybe also related to the nfs upgrade?

Example:
/data/project/sourcemd/import_orcid_dump.php is group-writable, but I get "permission denied" when writing as "magnus", even though I am in the tools.sourcemd group.

Event Timeline

Magnus raised the priority of this task from to High.
Magnus updated the task description. (Show Details)
Magnus added a project: Toolforge.
Magnus subscribed.
Restricted Application added a subscriber: Aklapper. · View Herald Transcript
coren subscribed.

Investigating this.

I can confirm this. It's not just that file, it seems to be the entire directory:

magnus@tools-bastion-01:/data/project/sourcemd$ touch test
touch: cannot touch ‘test’: Permission denied

no issues when try as tools.sourcemd or root. It works for one of my own projects:

valhallasw@tools-bastion-01:/data/project/gerrit-reviewer-bot$ touch test
valhallasw@tools-bastion-01:/data/project/gerrit-reviewer-bot$

uid/gid of /data/project/sourcemd/import_orcid_dump.php are 52680/52680, and magnus is in group 52680.

This is probably (?) related to the NFS maintenance today. Caching issue, maybe related to T106170: Attribute cache issue with NFS on Trusty? The issue is also present on tools-precise-dev, though, which suggests it's a different (maybe server-side) issue.

@coren, any suggestions?

To update: This is due to missing LDAP dependencies on the new labstore host. It's being investigated and we've potential solutions coming by. I'll keep this ticket updated.

Change 249466 had a related patch set uploaded (by coren):
Labs: reenable ldap on labstore*

https://gerrit.wikimedia.org/r/249466

yuvipanda raised the priority of this task from High to Unbreak Now!.Oct 28 2015, 6:31 PM
yuvipanda set Security to None.

Change 249466 merged by Faidon Liambotis:
Labs: reenable ldap on labstore*

https://gerrit.wikimedia.org/r/249466

This should be fixed as supplemental are now fully recognized again.