{"action":"created","issue":{"url":"https://api.github.com/repos/nfs-ganesha/nfs-ganesha/issues/102","repository_url":"https://api.github.com/repos/nfs-ganesha/nfs-ganesha","labels_url":"https://api.github.com/repos/nfs-ganesha/nfs-ganesha/issues/102/labels{/name}","comments_url":"https://api.github.com/repos/nfs-ganesha/nfs-ganesha/issues/102/comments","events_url":"https://api.github.com/repos/nfs-ganesha/nfs-ganesha/issues/102/events","html_url":"https://github.com/nfs-ganesha/nfs-ganesha/issues/102","id":160911050,"number":102,"title":"Ceph FSAL root_squash does not work as expected","user":{"login":"kwaegema","id":5611130,"avatar_url":"https://avatars.githubusercontent.com/u/5611130?v=3","gravatar_id":"","url":"https://api.github.com/users/kwaegema","html_url":"https://github.com/kwaegema","followers_url":"https://api.github.com/users/kwaegema/followers","following_url":"https://api.github.com/users/kwaegema/following{/other_user}","gists_url":"https://api.github.com/users/kwaegema/gists{/gist_id}","starred_url":"https://api.github.com/users/kwaegema/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/kwaegema/subscriptions","organizations_url":"https://api.github.com/users/kwaegema/orgs","repos_url":"https://api.github.com/users/kwaegema/repos","events_url":"https://api.github.com/users/kwaegema/events{/privacy}","received_events_url":"https://api.github.com/users/kwaegema/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"milestone":null,"comments":1,"created_at":"2016-06-17T15:12:49Z","updated_at":"2016-06-17T16:22:55Z","closed_at":null,"body":"Testing with 2.4-o-dev20:\r\nI did set root squash on in the ganesha.conf, but as root I can do metadata operations through the nfs mounts like creating direcories and running touch. Writing actual data data or changing permissions does not work, so that is ok. Also these created files/dirs also show up as root in the cephfs.\r\n\r\n"},"comment":{"url":"https://api.github.com/repos/nfs-ganesha/nfs-ganesha/issues/comments/226814859","html_url":"https://github.com/nfs-ganesha/nfs-ganesha/issues/102#issuecomment-226814859","issue_url":"https://api.github.com/repos/nfs-ganesha/nfs-ganesha/issues/102","id":226814859,"user":{"login":"ffilz","id":399443,"avatar_url":"https://avatars.githubusercontent.com/u/399443?v=3","gravatar_id":"","url":"https://api.github.com/users/ffilz","html_url":"https://github.com/ffilz","followers_url":"https://api.github.com/users/ffilz/followers","following_url":"https://api.github.com/users/ffilz/following{/other_user}","gists_url":"https://api.github.com/users/ffilz/gists{/gist_id}","starred_url":"https://api.github.com/users/ffilz/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/ffilz/subscriptions","organizations_url":"https://api.github.com/users/ffilz/orgs","repos_url":"https://api.github.com/users/ffilz/repos","events_url":"https://api.github.com/users/ffilz/events{/privacy}","received_events_url":"https://api.github.com/users/ffilz/received_events","type":"User","site_admin":false},"created_at":"2016-06-17T16:22:55Z","updated_at":"2016-06-17T16:22:55Z","body":"What did you do for your anonymous uid/gid? The default -2?\r\n\r\nA while back I identified a problem with the libcephfs interface which allows the caller to pass the credentials to use for the operation. Unfortunately, it's a signed value, and it utilizes negative values for the \"default\" of using the process credentials instead. Which means the typical -2 nfsnobody id (which considering uid_t is a uint64_t really is a really big positive number, but when passed to libcephfs, it becomes negative again since the libcephfs params are int64_t) tells libcephfs to use process credentials, which of course are root.\r\n\r\nThe current suggested workaround is to use a non-negative value for nfsnobody/anonuid, perhaps INT64_MAX or something like that."}}
{"actor":{"display_login":"ffilz"}}