Hi, Was pacemaker built "--with-acl"? Is "acls" listed in the output of "cibadmin -!"?
Regards, Gao,Yan On 07/08/13 17:57, emmanuel segura wrote: > Hi > > I did > > Thanks > > > 2013/7/8 Dejan Muhamedagic <deja...@fastmail.fm > <mailto:deja...@fastmail.fm>> > > Hi, > > On Mon, Jul 08, 2013 at 12:52:07AM +0200, emmanuel segura wrote: > > Hello List > > > > Maybe this is wrong the wrong list, but now i'm playing with pacemaker > > 1.10 and a i see the crmsh dosn't respeact the read permissions > like i > > show below > > > > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > [root@nod01 ~]# id watch > > uid=505(watch) gid=100(users) groups=100(users),989(haclient) > > > > [root@nod01 ~]# crm configure show | grep dc > > dc-version="1.1.10-1.fc18-e04c603" \ > > dc-deadtime="30" > > > > [root@nod01 ~]# su - watch > > [watch@nod01 ~]$ crm configure property dc-deadtime="60" > > [watch@nod01 ~]$ crm configure show | grep dc > > dc-version="1.1.10-1.fc18-e04c603" \ > > dc-deadtime="60" > > > My acl > > > > role monitor \ > > read cib > > user watch \ > > role:monitor > > > > ^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^^ > > Did you also set: > > crm configure property enable-acl=true > > BTW, it is not crmsh but cib (the process) which evaluates the > ACL. > > Thanks, > > Dejan > > > > > > > Thanks > > > > > > -- > > esta es mi vida e me la vivo hasta que dios quiera > > > _______________________________________________ > > Pacemaker mailing list: Pacemaker@oss.clusterlabs.org > <mailto:Pacemaker@oss.clusterlabs.org> > > http://oss.clusterlabs.org/mailman/listinfo/pacemaker > > > > Project Home: http://www.clusterlabs.org > > Getting started: > http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf > > Bugs: http://bugs.clusterlabs.org > > > _______________________________________________ > Pacemaker mailing list: Pacemaker@oss.clusterlabs.org > <mailto:Pacemaker@oss.clusterlabs.org> > http://oss.clusterlabs.org/mailman/listinfo/pacemaker > > Project Home: http://www.clusterlabs.org > Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf > Bugs: http://bugs.clusterlabs.org > > > > > -- > esta es mi vida e me la vivo hasta que dios quiera > > > _______________________________________________ > Pacemaker mailing list: Pacemaker@oss.clusterlabs.org > http://oss.clusterlabs.org/mailman/listinfo/pacemaker > > Project Home: http://www.clusterlabs.org > Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf > Bugs: http://bugs.clusterlabs.org > -- Gao,Yan <y...@suse.com> Software Engineer China Server Team, SUSE. _______________________________________________ Pacemaker mailing list: Pacemaker@oss.clusterlabs.org http://oss.clusterlabs.org/mailman/listinfo/pacemaker Project Home: http://www.clusterlabs.org Getting started: http://www.clusterlabs.org/doc/Cluster_from_Scratch.pdf Bugs: http://bugs.clusterlabs.org