diff options
| author | Venky Shankar <vshankar@redhat.com> | 2014-05-21 14:18:06 +0530 |
|---|---|---|
| committer | Venky Shankar <vshankar@redhat.com> | 2014-05-25 19:51:59 -0700 |
| commit | 74cc911d4301905d0722a943ca2b844637d4dc74 (patch) | |
| tree | c9dec4e5118eb3370fdf52d44890a1544e1bd2ae | |
| parent | bbb8313568bd0725f9faf1927ccefe79126a2113 (diff) | |
gsyncd / geo-rep: Mountbroker cli to use INET sockets
unprivileged geo-replication session runs the slave gsyncd
process as unprivileged, thereby executing gluster cli commands
as an unprivileged user. By default, cli to glusterd
uses unix domain sockets, thereby restricting cli command
execution by non root users.
This patch introduces '--remote-host' cli option to force
cli to use INET socket. For this to work, the following
needs to be added in glusterd volfile
option rpc-auth-allow-insecure on
Change-Id: I84b1711281bbcbde156200f80ebdb065afb55488
BUG: 1077452
Signed-off-by: Venky Shankar <vshankar@redhat.com>
Reviewed-on: http://review.gluster.org/7820
Tested-by: Gluster Build System <jenkins@build.gluster.com>
| -rw-r--r-- | geo-replication/syncdaemon/resource.py | 2 |
1 files changed, 1 insertions, 1 deletions
diff --git a/geo-replication/syncdaemon/resource.py b/geo-replication/syncdaemon/resource.py index 79dc9e79e9d..dadfc965336 100644 --- a/geo-replication/syncdaemon/resource.py +++ b/geo-replication/syncdaemon/resource.py @@ -1137,7 +1137,7 @@ class GLUSTER(AbstractUrl, SlaveLocal, SlaveRemote): @classmethod def make_cli_argv(cls): - return [cls.get_glusterprog()] + \ + return [cls.get_glusterprog()] + ['--remote-host=localhost'] + \ gconf.gluster_cli_options.split() + ['system::'] @classmethod |