cloudstack-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Jayapal Reddy (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (CLOUDSTACK-2134) [Multiple IPs Per Nic] "addIpToVmNic" is failing when tried as non-ROOT domain user
Date Fri, 17 May 2013 16:23:16 GMT

     [ https://issues.apache.org/jira/browse/CLOUDSTACK-2134?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Jayapal Reddy resolved CLOUDSTACK-2134.
---------------------------------------

    Resolution: Fixed
    
> [Multiple IPs Per Nic] "addIpToVmNic" is failing when tried as non-ROOT domain user
> -----------------------------------------------------------------------------------
>
>                 Key: CLOUDSTACK-2134
>                 URL: https://issues.apache.org/jira/browse/CLOUDSTACK-2134
>             Project: CloudStack
>          Issue Type: Bug
>      Security Level: Public(Anyone can view this level - this is the default.) 
>          Components: Network Controller
>    Affects Versions: 4.2.0
>         Environment: commit 81e1ba3bb406f9546f0d46ccbfa3fbbb35b762e2
>            Reporter: venkata swamybabu budumuru
>            Assignee: Jayapal Reddy
>            Priority: Critical
>             Fix For: 4.2.0
>
>
> Steps to reproduce :
> 1. Have a basic zone with 1 Xen Cluster
> 2. Create a domain under ROOT and a domain user 
> 3. deploy a VM as the above created domain user
> 4. try to add secondary ip to VMs guest nic using API "addIpToVmNic"
> Observations:
> (i) It fails with the following error.
> 3-04-22 11:49:22,234 DEBUG [cloud.async.AsyncJobManagerImpl] (Job-Executor-17:job-23)
job org.apache.cloudstack.api.command.user.vm.AddIpToVmNicCmd for job-23 was queued, processing
the queue.
> 2013-04-22 11:49:22,248 DEBUG [cloud.async.AsyncJobManagerImpl] (Job-Executor-17:job-23)
Executing sync queue item: SyncQueueItemVO {id:2, queueId: 1, contentType: AsyncJob, contentId:
23, lastProcessMsid: 7280707764394, lastprocessNumber: 2, lastProcessTime: Mon Apr 22 11:49:22
EDT 2013, created: Mon Apr 22 11:49:22 EDT 2013}
> 2013-04-22 11:49:22,250 DEBUG [cloud.async.AsyncJobManagerImpl] (Job-Executor-17:job-23)
Schedule queued job-23
> 2013-04-22 11:49:22,257 DEBUG [cloud.async.SyncQueueManagerImpl] (Job-Executor-17:job-23)
There is a pending process in sync queue(id: 1)
> 2013-04-22 11:49:22,259 DEBUG [cloud.async.AsyncJobManagerImpl] (Job-Executor-18:job-23)
Executing org.apache.cloudstack.api.command.user.vm.AddIpToVmNicCmd for job-23
> 2013-04-22 11:49:22,284 ERROR [cloud.async.AsyncJobManagerImpl] (Job-Executor-18:job-23)
Unexpected exception while executing org.apache.cloudstack.api.command.user.vm.AddIpToVmNicCmd
> com.cloud.exception.PermissionDeniedException: Acct[3-dom1Acc1] does not have permission
to operate with resource Ntwk[204|Guest|6]
>         at com.cloud.acl.DomainChecker.checkAccess(DomainChecker.java:132)
>         at com.cloud.user.AccountManagerImpl.checkAccess(AccountManagerImpl.java:384)
>         at com.cloud.network.NetworkServiceImpl.allocateSecondaryGuestIP(NetworkServiceImpl.java:508)
>         at org.apache.cloudstack.api.command.user.vm.AddIpToVmNicCmd.execute(AddIpToVmNicCmd.java:157)
>         at com.cloud.api.ApiDispatcher.dispatch(ApiDispatcher.java:164)
>         at com.cloud.async.AsyncJobManagerImpl$1.run(AsyncJobManagerImpl.java:437)
>         at java.util.concurrent.Executors$RunnableAdapter.call(Executors.java:471)
>         at java.util.concurrent.FutureTask$Sync.innerRun(FutureTask.java:334)
>         at java.util.concurrent.FutureTask.run(FutureTask.java:166)
>         at java.util.concurrent.ThreadPoolExecutor.runWorker(ThreadPoolExecutor.java:1146)
>         at java.util.concurrent.ThreadPoolExecutor$Worker.run(ThreadPoolExecutor.java:615)
>         at java.lang.Thread.run(Thread.java:679)
> 2013-04-22 11:49:22,285 DEBUG [cloud.async.AsyncJobManagerImpl] (Job-Executor-18:job-23)
Complete async job-23, jobStatus: 2, resultCode: 530, result: Error Code: 530 Error text:
Acct[3-dom1Acc1] does not have permission to operate with resource Ntwk[204|Guest|6]
> (ii) Same operation goes fine without any issues when executed as ROOT-Admin User.
> Attaching all the required logs to the bug

--
This message is automatically generated by JIRA.
If you think it was sent incorrectly, please contact your JIRA administrators
For more information on JIRA, see: http://www.atlassian.com/software/jira

Mime
View raw message