On Thu, Mar 14, 2013 at 10:18 AM, Andrew Beekhof <and...@beekhof.net> wrote: > On Wed, Mar 13, 2013 at 8:55 PM, matonb <mat...@ltresources.co.uk> wrote: >> Andrew Beekhof <andrew@...> writes: >> >>> >>> On Wed, Mar 13, 2013 at 5:55 PM, matonb <matonb@...> wrote: >>> > Andrew Beekhof <andrew@...> writes: >>> > >>> >> >>> >> On Wed, Mar 13, 2013 at 3:59 AM, matonb <matonb@...> wrote: >>> >> > Hi List, >>> >> > >>> >> > I've just upgraded a CentOS 6.3 server to 6.4, other than the >>> > disappearance >>> >> > of the crm shell tools, one thing I've noticed which is a minor >> annoyance >>> >> > rather than a problem is that users which are members of the haclient >>> > group >>> >> > can't use the crm tools any more: >>> > >>> > The 6.3 RPMS came from the CentOS base repository, any user that was a >> member >>> > of the haclient group could execute and connect to the cluster using >> commands >>> > such as crm_mon (the most frequently used). >>> >>> Ah, thats not the ACLs Lars was talking about. >>> What you're talking about should still work, nothing should have >>> changed in that area between 6.3 and 6.4. >>> I will investigate. >> >> Thanks :-) > > Ah. Hmmm, well this is embarrassing. > 6.4 uses a different IPC system than 6.3 and in the conversion we > unintentionally lost the ability to do what you're attempting. > It seems you're the first person to notice in the year since we > switched upstream :-( > > I'm going to set about fixing this now but I'm not yet sure if I'll be > able to get the fix into 6.4. > In the meantime, adding people to the root group (yes, I'm aware how > horrible that is) would return the capability in some form.
I believe this should make everyone happy: https://github.com/beekhof/pacemaker/commit/3c9275e Are you able to test it? > Once I have restored the capability, I'll post updated RHEL RPMs to > clusterlabs.org/rpm-next > >> I think the ACL's got roped in because I tried to implement them to solve >> the problem. Which as you've both mentioned aren't in the release I'm >> using. >> >> >> >> >> _______________________________________________ >> Pacemaker mailing list: Pacemaker@oss.clusterlabs.org >> http://oss.clusterlabs.org/mailman/listinfo/pacemaker >> >> Project Home: http://www.clusterlabs.org >> Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf >> Bugs: http://bugs.clusterlabs.org _______________________________________________ Pacemaker mailing list: Pacemaker@oss.clusterlabs.org http://oss.clusterlabs.org/mailman/listinfo/pacemaker Project Home: http://www.clusterlabs.org Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf Bugs: http://bugs.clusterlabs.org