The Precise Pangolin has reached end of life, so this bug will not be fixed for that release
** Changed in: quantum (Ubuntu Precise) Status: Confirmed => Won't Fix -- You received this bug notification because you are a member of Yahoo! Engineering Team, which is subscribed to neutron. https://bugs.launchpad.net/bugs/1069966 Title: rootwrap error with L3 agent Status in neutron: Fix Released Status in neutron folsom series: Fix Released Status in quantum package in Ubuntu: Fix Released Status in quantum source package in Precise: Won't Fix Status in quantum source package in Quantal: Fix Released Bug description: I am seeing the following error in /var/log/quantum/l3_agent.log: 2012-10-22 09:00:48 DEBUG [quantum.agent.linux.utils] Running command: sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf /sbin/iptables-save -t filter 2012-10-22 09:00:48 DEBUG [quantum.agent.linux.utils] Command: ['sudo', '/usr/bin/quantum-rootwrap', '/etc/quantum/rootwrap.conf', '/sbin/iptables-save', '-t', 'filter'] Exit code: 99 Stdout: 'Unauthorized command: /sbin/iptables-save -t filter\n' Stderr: '' 2012-10-22 09:00:48 ERROR [quantum.agent.l3_agent] Error running l3_nat daemon_loop Traceback (most recent call last): File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 170, in daemon_loop self.do_single_loop() File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 227, in do_single_loop self.process_router(ri) File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 300, in process_router self.external_gateway_added(ri, ex_gw_port, internal_cidrs) File "/usr/lib/python2.7/dist-packages/quantum/agent/l3_agent.py", line 398, in external_gateway_added ri.iptables_manager.apply() File "/usr/lib/python2.7/dist-packages/quantum/agent/linux/iptables_manager.py", line 282, in apply root_helper=self.root_helper)) File "/usr/lib/python2.7/dist-packages/quantum/agent/linux/utils.py", line 55, in execute raise RuntimeError(m) RuntimeError: Command: ['sudo', '/usr/bin/quantum-rootwrap', '/etc/quantum/rootwrap.conf', '/sbin/iptables-save', '-t', 'filter'] Exit code: 99 Stdout: 'Unauthorized command: /sbin/iptables-save -t filter\n' Stderr: '' If I run "sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf /sbin/iptables-save -t filter" it does indeed give me an Unauthorized command error. If I run "sudo /usr/bin/quantum-rootwrap /etc/quantum/rootwrap.conf iptables-save -t filter" (without the /sbin/) it works OK. Otherwise, I don't see errors in the log. Is this a problem? Thanks, Graham To manage notifications about this bug go to: https://bugs.launchpad.net/neutron/+bug/1069966/+subscriptions -- Mailing list: https://launchpad.net/~yahoo-eng-team Post to : yahoo-eng-team@lists.launchpad.net Unsubscribe : https://launchpad.net/~yahoo-eng-team More help : https://help.launchpad.net/ListHelp