Page MenuHomeSoftware Heritage

Investigate NFS UID and GID mapping
Closed, MigratedEdits Locked

Description

There are inconsistencies bewteen uids on uffizi (nfs server) and the frontends.

For instance, uffizi:/srv/storage/space/backups/prado/postgres is owned by puppet:munin, when the permissions are correct on prado (postgres:postgres).

Related Objects

StatusAssignedTask
Migratedgitlab-migration

Event Timeline

olasd claimed this task.
olasd raised the priority of this task from to Low.
olasd updated the task description. (Show Details)
olasd added a subscriber: olasd.
zack moved this task from This week to Backlog on the Staff board.
olasd changed the visibility from "All Users" to "Public (No Login Required)".May 13 2016, 5:04 PM

Still true as of today:

Rapid check:

ardumont@uffizi:~% id puppet
uid=109(puppet) gid=114(puppet) groups=114(puppet)
ardumont@uffizi:~% id munin
uid=110(munin) gid=115(munin) groups=115(munin)
...
ardumont@prado:~% id postgres
uid=109(postgres) gid=115(postgres) groups=115(postgres),1002(swhdev),114(ssl-cert),1007(swhbackup)

That would be the reason of the match.

The reason of this behavior is Debian uses dynamic UIDs for most of its system users.

The behavior of uffizi:/srv/storage/space/backups/prado wrt user names/uid mappings is also problematic for Postgres log backups on belvedere.

ftigeot added a parent task: Unknown Object (Maniphest Task).