3 # Run select tests by setting ONLY, or as arguments to the script.
4 # Skip specific tests by setting EXCEPT.
10 # bug number for skipped test: 19430 LU-5423 19967 19967
11 ALWAYS_EXCEPT=" 2 4 5 6 $SANITY_SEC_EXCEPT"
12 # UPDATE THE COMMENT ABOVE WITH BUG NUMBERS WHEN CHANGING ALWAYS_EXCEPT!
14 [ "$ALWAYS_EXCEPT$EXCEPT" ] && \
15 echo "Skipping tests: $ALWAYS_EXCEPT $EXCEPT"
18 export PATH=$PWD/$SRCDIR:$SRCDIR:$PWD/$SRCDIR/../utils:$PATH:/sbin
19 export NAME=${NAME:-local}
21 LUSTRE=${LUSTRE:-`dirname $0`/..}
22 . $LUSTRE/tests/test-framework.sh
24 . ${CONFIG:=$LUSTRE/tests/cfg/$NAME.sh}
29 WTL=${WTL:-"$LUSTRE/tests/write_time_limit"}
32 PERM_CONF=$CONFDIR/perm.conf
35 HOSTNAME_CHECKSUM=$(hostname | sum | awk '{ print $1 }')
36 SUBNET_CHECKSUM=$(expr $HOSTNAME_CHECKSUM % 250 + 1)
39 NODEMAP_IPADDR_LIST="1 10 64 128 200 250"
42 require_dsh_mds || exit 0
43 require_dsh_ost || exit 0
47 USER0=`cat /etc/passwd|grep :$ID0:$ID0:|cut -d: -f1`
48 USER1=`cat /etc/passwd|grep :$ID1:$ID1:|cut -d: -f1`
51 echo "Please add user0 (uid=$ID0 gid=$ID0)! Skip sanity-sec" && exit 0
54 echo "Please add user1 (uid=$ID1 gid=$ID1)! Skip sanity-sec" && exit 0
56 check_and_setup_lustre
59 if [ "$I_MOUNTED" = "yes" ]; then
60 cleanupall -f || error "sec_cleanup"
65 [ -z "`echo $DIR | grep $MOUNT`" ] && \
66 error "$DIR not in $MOUNT" && sec_cleanup && exit 1
68 [ `echo $MOUNT | wc -w` -gt 1 ] && \
69 echo "NAME=$MOUNT mounted more than once" && sec_cleanup && exit 0
71 [ $MDSCOUNT -gt 1 ] && \
72 echo "skip multi-MDS test" && sec_cleanup && exit 0
75 GSS_REF=$(lsmod | grep ^ptlrpc_gss | awk '{print $3}')
76 if [ ! -z "$GSS_REF" -a "$GSS_REF" != "0" ]; then
78 echo "with GSS support"
81 echo "without GSS support"
84 MDT=$(do_facet $SINGLEMDS lctl get_param -N "mdt.\*MDT0000" |
86 [ -z "$MDT" ] && error "fail to get MDT device" && exit 1
87 do_facet $SINGLEMDS "mkdir -p $CONFDIR"
88 IDENTITY_FLUSH=mdt.$MDT.identity_flush
90 CAPA_TIMEOUT=mdt.$MDT.capa_timeout
91 MDSSECLEVEL=mdt.$MDT.sec_level
94 if [ -z "$(lctl get_param -n llite.*.client_type | grep remote 2>/dev/null)" ]; then
110 if ! $RUNAS -u $user krb5_login.sh; then
111 error "$user login kerberos failed."
115 if ! $RUNAS -u $user -g $group ls $DIR > /dev/null 2>&1; then
116 $RUNAS -u $user lfs flushctx -k
117 $RUNAS -u $user krb5_login.sh
118 if ! $RUNAS -u $user -g $group ls $DIR > /dev/null 2>&1; then
119 error "init $user $group failed."
125 declare -a identity_old
128 for num in `seq $MDSCOUNT`; do
129 switch_identity $num true || identity_old[$num]=$?
132 if ! $RUNAS -u $ID0 ls $DIR > /dev/null 2>&1; then
133 sec_login $USER0 $USER0
136 if ! $RUNAS -u $ID1 ls $DIR > /dev/null 2>&1; then
137 sec_login $USER1 $USER1
142 # run as different user
146 chmod 0755 $DIR || error "chmod (1)"
147 rm -rf $DIR/$tdir || error "rm (1)"
148 mkdir -p $DIR/$tdir || error "mkdir (1)"
150 if [ "$CLIENT_TYPE" = "remote" ]; then
151 do_facet $SINGLEMDS "echo '* 0 normtown' > $PERM_CONF"
152 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
153 chown $USER0 $DIR/$tdir && error "chown (1)"
154 do_facet $SINGLEMDS "echo '* 0 rmtown' > $PERM_CONF"
155 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
157 chown $USER0 $DIR/$tdir || error "chown (2)"
160 $RUNAS -u $ID0 ls $DIR || error "ls (1)"
161 rm -f $DIR/f0 || error "rm (2)"
162 $RUNAS -u $ID0 touch $DIR/f0 && error "touch (1)"
163 $RUNAS -u $ID0 touch $DIR/$tdir/f1 || error "touch (2)"
164 $RUNAS -u $ID1 touch $DIR/$tdir/f2 && error "touch (3)"
165 touch $DIR/$tdir/f3 || error "touch (4)"
166 chown root $DIR/$tdir || error "chown (3)"
167 chgrp $USER0 $DIR/$tdir || error "chgrp (1)"
168 chmod 0775 $DIR/$tdir || error "chmod (2)"
169 $RUNAS -u $ID0 touch $DIR/$tdir/f4 || error "touch (5)"
170 $RUNAS -u $ID1 touch $DIR/$tdir/f5 && error "touch (6)"
171 touch $DIR/$tdir/f6 || error "touch (7)"
172 rm -rf $DIR/$tdir || error "rm (3)"
174 if [ "$CLIENT_TYPE" = "remote" ]; then
175 do_facet $SINGLEMDS "rm -f $PERM_CONF"
176 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
179 run_test 0 "uid permission ============================="
183 [ $GSS_SUP = 0 ] && skip "without GSS support." && return
185 if [ "$CLIENT_TYPE" = "remote" ]; then
186 do_facet $SINGLEMDS "echo '* 0 rmtown' > $PERM_CONF"
187 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
193 chown $USER0 $DIR/$tdir || error "chown (1)"
194 $RUNAS -u $ID1 -v $ID0 touch $DIR/$tdir/f0 && error "touch (2)"
195 echo "enable uid $ID1 setuid"
196 do_facet $SINGLEMDS "echo '* $ID1 setuid' >> $PERM_CONF"
197 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
198 $RUNAS -u $ID1 -v $ID0 touch $DIR/$tdir/f1 || error "touch (3)"
200 chown root $DIR/$tdir || error "chown (4)"
201 chgrp $USER0 $DIR/$tdir || error "chgrp (5)"
202 chmod 0770 $DIR/$tdir || error "chmod (6)"
203 $RUNAS -u $ID1 -g $ID1 touch $DIR/$tdir/f2 && error "touch (7)"
204 $RUNAS -u $ID1 -g $ID1 -j $ID0 touch $DIR/$tdir/f3 && error "touch (8)"
205 echo "enable uid $ID1 setuid,setgid"
206 do_facet $SINGLEMDS "echo '* $ID1 setuid,setgid' > $PERM_CONF"
207 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
208 $RUNAS -u $ID1 -g $ID1 -j $ID0 touch $DIR/$tdir/f4 || error "touch (9)"
209 $RUNAS -u $ID1 -v $ID0 -g $ID1 -j $ID0 touch $DIR/$tdir/f5 || error "touch (10)"
213 do_facet $SINGLEMDS "rm -f $PERM_CONF"
214 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
216 run_test 1 "setuid/gid ============================="
218 run_rmtacl_subtest() {
219 $SAVE_PWD/rmtacl/run $SAVE_PWD/rmtacl/$1.test
224 # for remote client only
226 [ "$CLIENT_TYPE" = "local" ] && \
227 skip "remote_acl for remote client only" && return
228 [ -z "$(lctl get_param -n mdc.*-mdc-*.connect_flags | grep ^acl)" ] && \
229 skip "must have acl enabled" && return
230 [ -z "$(which setfacl 2>/dev/null)" ] && \
231 skip "could not find setfacl" && return
232 [ "$UID" != 0 ] && skip "must run as root" && return
234 do_facet $SINGLEMDS "echo '* 0 rmtacl,rmtown' > $PERM_CONF"
235 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
239 sec_login daemon daemon
240 sec_login games users
246 echo "performing cp ..."
247 run_rmtacl_subtest cp || error "cp"
248 echo "performing getfacl-noacl..."
249 run_rmtacl_subtest getfacl-noacl || error "getfacl-noacl"
250 echo "performing misc..."
251 run_rmtacl_subtest misc || error "misc"
252 echo "performing permissions..."
253 run_rmtacl_subtest permissions || error "permissions"
254 echo "performing setfacl..."
255 run_rmtacl_subtest setfacl || error "setfacl"
257 # inheritance test got from HP
258 echo "performing inheritance..."
259 cp $SAVE_PWD/rmtacl/make-tree .
261 run_rmtacl_subtest inheritance || error "inheritance"
267 do_facet $SINGLEMDS "rm -f $PERM_CONF"
268 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
270 run_test 2 "rmtacl ============================="
273 # root_squash will be redesigned in Lustre 1.7
275 skip "root_squash will be redesigned in Lustre 1.7" && return
277 run_test 3 "rootsquash ============================="
279 # bug 3285 - supplementary group should always succeed.
280 # NB: the supplementary groups are set for local client only,
281 # as for remote client, the groups of the specified uid on MDT
282 # will be obtained by upcall /sbin/l_getidentity and used.
284 if [ "$CLIENT_TYPE" = "remote" ]; then
285 do_facet $SINGLEMDS "echo '* 0 rmtown' > $PERM_CONF"
286 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
291 chmod 0771 $DIR/$tdir
292 chgrp $ID0 $DIR/$tdir
293 $RUNAS -u $ID0 ls $DIR/$tdir || error "setgroups (1)"
294 if [ "$CLIENT_TYPE" = "local" ]; then
295 do_facet $SINGLEMDS "echo '* $ID1 setgrp' > $PERM_CONF"
296 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
297 $RUNAS -u $ID1 -G1,2,$ID0 ls $DIR/$tdir || error "setgroups (2)"
299 $RUNAS -u $ID1 -G1,2 ls $DIR/$tdir && error "setgroups (3)"
302 do_facet $SINGLEMDS "rm -f $PERM_CONF"
303 do_facet $SINGLEMDS "lctl set_param -n $IDENTITY_FLUSH=-1"
305 run_test 4 "set supplementary group ==============="
307 mds_capability_timeout() {
308 [ $# -lt 1 ] && echo "Miss mds capability timeout value" && return 1
310 echo "Set mds capability timeout as $1 seconds"
311 do_facet $SINGLEMDS "lctl set_param -n $CAPA_TIMEOUT=$1"
315 mds_sec_level_switch() {
316 [ $# -lt 1 ] && echo "Miss mds sec level switch value" && return 1
319 0) echo "Disable capa for all clients";;
320 1) echo "Enable capa for remote client";;
321 3) echo "Enable capa for all clients";;
322 *) echo "Invalid mds sec level switch value" && return 2;;
325 do_facet $SINGLEMDS "lctl set_param -n $MDSSECLEVEL=$1"
329 oss_sec_level_switch() {
330 [ $# -lt 1 ] && echo "Miss oss sec level switch value" && return 1
333 0) echo "Disable capa for all clients";;
334 1) echo "Enable capa for remote client";;
335 3) echo "Enable capa for all clients";;
336 *) echo "Invalid oss sec level switch value" && return 2;;
339 for i in `seq $OSTCOUNT`; do
340 local j=`expr $i - 1`
341 local OST="`do_facet ost$i "lctl get_param -N obdfilter.\*OST\*$j/stats 2>/dev/null | cut -d"." -f2" || true`"
342 [ -z "$OST" ] && return 3
343 do_facet ost$i "lctl set_param -n obdfilter.$OST.sec_level=$1"
348 mds_capability_switch() {
349 [ $# -lt 1 ] && echo "Miss mds capability switch value" && return 1
352 0) echo "Turn off mds capability";;
353 3) echo "Turn on mds capability";;
354 *) echo "Invalid mds capability switch value" && return 2;;
357 do_facet $SINGLEMDS "lctl set_param -n $MDSCAPA=$1"
361 oss_capability_switch() {
362 [ $# -lt 1 ] && echo "Miss oss capability switch value" && return 1
365 0) echo "Turn off oss capability";;
366 1) echo "Turn on oss capability";;
367 *) echo "Invalid oss capability switch value" && return 2;;
370 for i in `seq $OSTCOUNT`; do
371 local j=`expr $i - 1`
372 local OST="`do_facet ost$i "lctl get_param -N obdfilter.\*OST\*$j/stats 2>/dev/null | cut -d"." -f2" || true`"
373 [ -z "$OST" ] && return 3
374 do_facet ost$i "lctl set_param -n obdfilter.$OST.capa=$1"
380 mds_capability_switch 3 || return 1
381 mds_sec_level_switch 3 || return 2
386 oss_capability_switch 1 || return 1
387 oss_sec_level_switch 3 || return 2
391 turn_capability_on() {
392 local capa_timeout=${1:-"1800"}
394 # To turn on fid capability for the system,
395 # there is a requirement that fid capability
396 # is turned on on all MDS/OSS servers before
399 turn_mds_capa_on || return 1
400 turn_oss_capa_on || return 2
401 mds_capability_timeout $capa_timeout || return 3
402 remount_client $MOUNT || return 4
406 turn_mds_capa_off() {
407 mds_sec_level_switch 0 || return 1
408 mds_capability_switch 0 || return 2
412 turn_oss_capa_off() {
413 oss_sec_level_switch 0 || return 1
414 oss_capability_switch 0 || return 2
418 turn_capability_off() {
419 # to turn off fid capability, you can just do
420 # it in a live system. But, please turn off
421 # capability of all OSS servers before MDS servers.
423 turn_oss_capa_off || return 1
424 turn_mds_capa_off || return 2
428 # We demonstrate that access to the objects in the filesystem are not
429 # accessible without supplying secrets from the MDS by disabling a
430 # proc variable on the mds so that it does not supply secrets. We then
431 # try and access objects which result in failure.
435 [ $GSS_SUP = 0 ] && skip "without GSS support." && return
436 if ! remote_mds; then
437 skip "client should be separated from server."
445 error "turn_capability_off"
451 error "turn_oss_capa_on"
455 if [ "$CLIENT_TYPE" = "remote" ]; then
456 remount_client $MOUNT && return 3
460 remount_client $MOUNT || return 4
463 # proc variable disabled -- access to the objects in the filesystem
465 echo "Should get Write error here : (proc variable are disabled "\
466 "-- access to the objects in the filesystem is denied."
469 error "Write worked well even though secrets not supplied."
475 error "turn_capability_on"
481 # proc variable enabled, secrets supplied -- write should work now
482 echo "Should not fail here : (proc variable enabled, secrets supplied "\
483 "-- write should work now)."
486 error "Write failed even though secrets supplied."
492 error "turn_capability_off"
497 run_test 5 "capa secrets ========================="
499 # Expiry: A test program is performing I/O on a file. It has credential
500 # with an expiry half a minute later. While the program is running the
501 # credentials expire and no automatic extensions or renewals are
502 # enabled. The program will demonstrate an I/O failure.
506 [ $GSS_SUP = 0 ] && skip "without GSS support." && return
507 if ! remote_mds; then
508 skip "client should be separated from server."
514 error "turn_capability_off"
520 turn_capability_on 30
522 error "turn_capability_on 30"
529 error "$WTL $file 60"
533 # Reset MDS capability timeout
534 mds_capability_timeout 30
536 error "mds_capability_timeout 30"
544 # To disable automatic renew, only need turn capa off on MDS.
547 error "turn_mds_capa_off"
551 echo "We expect I/O failure."
554 echo "no I/O failure got."
560 error "turn_capability_off"
565 run_test 6 "capa expiry ========================="
572 for (( i = 0; i < NODEMAP_COUNT; i++ )); do
573 if ! do_facet mgs $LCTL nodemap_add \
574 ${HOSTNAME_CHECKSUM}_${i}; then
577 out=$(do_facet mgs $LCTL get_param \
578 nodemap.${HOSTNAME_CHECKSUM}_${i}.id)
579 ## This needs to return zero if the following statement is 1
580 rc=$(echo $out | grep -c ${HOSTNAME_CHECKSUM}_${i})
581 [[ $rc == 0 ]] && return 1
591 for ((i = 0; i < NODEMAP_COUNT; i++)); do
592 if ! do_facet mgs $LCTL nodemap_del \
593 ${HOSTNAME_CHECKSUM}_${i}; then
594 error "nodemap_del ${HOSTNAME_CHECKSUM}_${i} \
598 out=$(do_facet mgs $LCTL get_param \
599 nodemap.${HOSTNAME_CHECKSUM}_${i}.id)
600 rc=$(echo $out | grep -c ${HOSTNAME_CHECKSUM}_${i})
601 [[ $rc != 0 ]] && return 1
608 local cmd="$LCTL nodemap_add_range"
612 for ((j = 0; j < NODEMAP_RANGE_COUNT; j++)); do
613 range="$SUBNET_CHECKSUM.${2}.${j}.[1-253]@tcp"
614 if ! do_facet mgs $cmd --name $1 \
624 local cmd="$LCTL nodemap_del_range"
628 for ((j = 0; j < NODEMAP_RANGE_COUNT; j++)); do
629 range="$SUBNET_CHECKSUM.${2}.${j}.[1-253]@tcp"
630 if ! do_facet mgs $cmd --name $1 \
644 local cmd="$LCTL nodemap_add_idmap"
647 for ((i = 0; i < NODEMAP_COUNT; i++)); do
648 for ((j = 500; j < NODEMAP_MAX_ID; j++)); do
651 if ! do_facet mgs $cmd \
652 --name ${HOSTNAME_CHECKSUM}_${i} \
653 --idtype uid --idmap $client_id:$fs_id; then
656 if ! do_facet mgs $cmd \
657 --name ${HOSTNAME_CHECKSUM}_${i} \
658 --idtype gid --idmap $client_id:$fs_id; then
672 local cmd="$LCTL nodemap_del_idmap"
675 for ((i = 0; i < NODEMAP_COUNT; i++)); do
676 for ((j = 500; j < NODEMAP_MAX_ID; j++)); do
679 if ! do_facet mgs $cmd \
680 --name ${HOSTNAME_CHECKSUM}_${i} \
681 --idtype uid --idmap $client_id:$fs_id; then
684 if ! do_facet mgs $cmd \
685 --name ${HOSTNAME_CHECKSUM}_${i} \
686 --idtype gid --idmap $client_id:$fs_id; then
699 local cmd="$LCTL nodemap_modify"
702 proc[0]="admin_nodemap"
703 proc[1]="trusted_nodemap"
707 for ((idx = 0; idx < 2; idx++)); do
708 if ! do_facet mgs $cmd --name $1 \
709 --property ${option[$idx]} \
714 if ! do_facet mgs $cmd --name $1 \
715 --property ${option[$idx]} \
727 cmd[0]="$LCTL nodemap_modify --property squash_uid"
728 cmd[1]="$LCTL nodemap_modify --property squash_gid"
730 if ! do_facet mgs ${cmd[$3]} --name $1 --value $2; then
735 # ensure that the squash defaults are the expected defaults
736 squash_id default 99 0
737 squash_id default 99 1
742 cmd="$LCTL nodemap_test_nid"
744 nid=$(do_facet mgs $cmd $1)
746 if [ $nid == $2 ]; then
757 local cmd="$LCTL nodemap_test_id"
760 ## nodemap deactivated
761 if ! do_facet mgs lctl nodemap_activate 0; then
764 for ((id = 500; id < NODEMAP_MAX_ID; id++)); do
765 for ((j = 0; j < NODEMAP_RANGE_COUNT; j++)); do
766 nid="$SUBNET_CHECKSUM.0.${j}.100@tcp"
767 fs_id=$(do_facet mgs $cmd --nid $nid \
768 --idtype uid --id $id)
769 if [ $fs_id != $id ]; then
776 if ! do_facet mgs lctl nodemap_activate 1; then
780 for ((id = 500; id < NODEMAP_MAX_ID; id++)); do
781 for ((j = 0; j < NODEMAP_RANGE_COUNT; j++)); do
782 nid="$SUBNET_CHECKSUM.0.${j}.100@tcp"
783 fs_id=$(do_facet mgs $cmd --nid $nid \
784 --idtype uid --id $id)
785 expected_id=$((id + 1))
786 if [ $fs_id != $expected_id ]; then
793 for ((i = 0; i < NODEMAP_COUNT; i++)); do
794 if ! do_facet mgs $LCTL nodemap_modify \
795 --name ${HOSTNAME_CHECKSUM}_${i} \
796 --property trusted --value 1; then
797 error "nodemap_modify ${HOSTNAME_CHECKSUM}_${i} "
803 for ((id = 500; id < NODEMAP_MAX_ID; id++)); do
804 for ((j = 0; j < NODEMAP_RANGE_COUNT; j++)); do
805 nid="$SUBNET_CHECKSUM.0.${j}.100@tcp"
806 fs_id=$(do_facet mgs $cmd --nid $nid \
807 --idtype uid --id $id)
808 expected_id=$((id + 1))
809 if [ $fs_id != $id ]; then
815 ## ensure allow_root_access is enabled
816 for ((i = 0; i < NODEMAP_COUNT; i++)); do
817 if ! do_facet mgs $LCTL nodemap_modify \
818 --name ${HOSTNAME_CHECKSUM}_${i} \
819 --property admin --value 1; then
820 error "nodemap_modify ${HOSTNAME_CHECKSUM}_${i} "
826 ## check that root is mapped to 99
827 for ((j = 0; j < NODEMAP_RANGE_COUNT; j++)); do
828 nid="$SUBNET_CHECKSUM.0.${j}.100@tcp"
829 fs_id=$(do_facet mgs $cmd --nid $nid --idtype uid --id 0)
830 expected_id=$((id + 1))
831 if [ $fs_id != 0 ]; then
836 ## ensure allow_root_access is disabled
837 for ((i = 0; i < NODEMAP_COUNT; i++)); do
838 if ! do_facet mgs $LCTL nodemap_modify \
839 --name ${HOSTNAME_CHECKSUM}_${i} \
840 --property admin --value 0; then
841 error "nodemap_modify ${HOSTNAME_CHECKSUM}_${i} "
847 ## check that root allowed
848 for ((j = 0; j < NODEMAP_RANGE_COUNT; j++)); do
849 nid="$SUBNET_CHECKSUM.0.${j}.100@tcp"
850 fs_id=$(do_facet mgs $cmd --nid $nid --idtype uid --id 0)
851 expected_id=$((id + 1))
852 if [ $fs_id != 99 ]; then
857 ## reset client trust to 0
858 for ((i = 0; i < NODEMAP_COUNT; i++)); do
859 if ! do_facet mgs $LCTL nodemap_modify \
860 --name ${HOSTNAME_CHECKSUM}_${i} \
861 --property trusted --value 0; then
862 error "nodemap_modify ${HOSTNAME_CHECKSUM}_${i} "
874 remote_mgs_nodsh && skip "remote MGS with nodsh" && return
875 [ $(lustre_version_code $SINGLEMGS) -lt $(version_code 2.5.53) ] &&
876 skip "No nodemap on $(get_lustre_version) MGS, need 2.5.53+" &&
881 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 1
885 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 2
889 run_test 7 "nodemap create and delete"
894 remote_mgs_nodsh && skip "remote MGS with nodsh" && return
895 [ $(lustre_version_code $SINGLEMGS) -lt $(version_code 2.5.53) ] &&
896 skip "No nodemap on $(get_lustre_version) MGS, need 2.5.53+" &&
903 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 1
909 [[ $rc == 0 ]] && error "duplicate nodemap_add allowed with $rc" &&
915 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 3
919 run_test 8 "nodemap reject duplicates"
925 remote_mgs_nodsh && skip "remote MGS with nodsh" && return
926 [ $(lustre_version_code $SINGLEMGS) -lt $(version_code 2.5.53) ] &&
927 skip "No nodemap on $(get_lustre_version) MGS, need 2.5.53+" &&
933 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 1
936 for ((i = 0; i < NODEMAP_COUNT; i++)); do
937 if ! add_range ${HOSTNAME_CHECKSUM}_${i} $i; then
941 [[ $rc != 0 ]] && error "nodemap_add_range failed with $rc" && return 2
944 for ((i = 0; i < NODEMAP_COUNT; i++)); do
945 if ! delete_range ${HOSTNAME_CHECKSUM}_${i} $i; then
949 [[ $rc != 0 ]] && error "nodemap_del_range failed with $rc" && return 4
954 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 4
958 run_test 9 "nodemap range add"
963 remote_mgs_nodsh && skip "remote MGS with nodsh" && return
964 [ $(lustre_version_code $SINGLEMGS) -lt $(version_code 2.5.53) ] &&
965 skip "No nodemap on $(get_lustre_version) MGS, need 2.5.53+" &&
971 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 1
974 for ((i = 0; i < NODEMAP_COUNT; i++)); do
975 if ! add_range ${HOSTNAME_CHECKSUM}_${i} $i; then
979 [[ $rc != 0 ]] && error "nodemap_add_range failed with $rc" && return 2
982 for ((i = 0; i < NODEMAP_COUNT; i++)); do
983 if ! add_range ${HOSTNAME_CHECKSUM}_${i} $i; then
987 [[ $rc == 0 ]] && error "nodemap_add_range duplicate add with $rc" &&
992 for ((i = 0; i < NODEMAP_COUNT; i++)); do
993 if ! delete_range ${HOSTNAME_CHECKSUM}_${i} $i; then
997 [[ $rc != 0 ]] && error "nodemap_del_range failed with $rc" && return 4
1001 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 5
1005 run_test 10 "nodemap reject duplicate ranges"
1010 remote_mgs_nodsh && skip "remote MGS with nodsh" && return
1011 [ $(lustre_version_code $SINGLEMGS) -lt $(version_code 2.5.53) ] &&
1012 skip "No nodemap on $(get_lustre_version) MGS, need 2.5.53+" &&
1018 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 1
1021 for ((i = 0; i < NODEMAP_COUNT; i++)); do
1022 if ! modify_flags ${HOSTNAME_CHECKSUM}_${i}; then
1026 [[ $rc != 0 ]] && error "nodemap_modify with $rc" && return 2
1031 [[ $rc != 0 ]] && error "nodemap_del failed with $rc" && return 3
1035 run_test 11 "nodemap modify"
1040 remote_mgs_nodsh && skip "remote MGS with nodsh" && return
1041 [ $(lustre_version_code $SINGLEMGS) -lt $(version_code 2.5.53) ] &&
1042 skip "No nodemap on $(get_lustre_version) MGS, need 2.5.53+" &&
1048 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 1
1051 for ((i = 0; i < NODEMAP_COUNT; i++)); do
1052 if ! squash_id ${HOSTNAME_CHECKSUM}_${i} 88 0; then
1056 [[ $rc != 0 ]] && error "nodemap squash_uid with $rc" && return 2
1059 for ((i = 0; i < NODEMAP_COUNT; i++)); do
1060 if ! squash_id ${HOSTNAME_CHECKSUM}_${i} 88 1; then
1064 [[ $rc != 0 ]] && error "nodemap squash_gid with $rc" && return 3
1069 [[ $rc != 0 ]] && error "nodemap_del failed with $rc" && return 4
1073 run_test 12 "nodemap set squash ids"
1078 remote_mgs_nodsh && skip "remote MGS with nodsh" && return
1079 [ $(lustre_version_code $SINGLEMGS) -lt $(version_code 2.5.53) ] &&
1080 skip "No nodemap on $(get_lustre_version) MGS, need 2.5.53+" &&
1086 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 1
1089 for ((i = 0; i < NODEMAP_COUNT; i++)); do
1090 if ! add_range ${HOSTNAME_CHECKSUM}_${i} $i; then
1094 [[ $rc != 0 ]] && error "nodemap_add_range failed with $rc" && return 2
1097 for ((i = 0; i < NODEMAP_COUNT; i++)); do
1098 for ((j = 0; j < NODEMAP_RANGE_COUNT; j++)); do
1099 for k in $NODEMAP_IPADDR_LIST; do
1100 if ! test_nid $SUBNET_CHECKSUM.$i.$j.$k \
1101 ${HOSTNAME_CHECKSUM}_${i}; then
1107 [[ $rc != 0 ]] && error "nodemap_test_nid failed with $rc" && return 3
1112 [[ $rc != 0 ]] && error "nodemap_del failed with $rc" && return 4
1116 run_test 13 "test nids"
1121 remote_mgs_nodsh && skip "remote MGS with nodsh" && return
1122 [ $(lustre_version_code $SINGLEMGS) -lt $(version_code 2.5.53) ] &&
1123 skip "No nodemap on $(get_lustre_version) MGS, need 2.5.53+" &&
1129 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 1
1132 for ((i = 0; i < NODEMAP_COUNT; i++)); do
1133 for ((j = 0; j < NODEMAP_RANGE_COUNT; j++)); do
1134 for k in $NODEMAP_IPADDR_LIST; do
1135 if ! test_nid $SUBNET_CHECKSUM.$i.$j.$k \
1142 [[ $rc != 0 ]] && error "nodemap_test_nid failed with $rc" && return 3
1147 [[ $rc != 0 ]] && error "nodemap_del failed with $rc" && return 4
1151 run_test 14 "test default nodemap nid lookup"
1156 remote_mgs_nodsh && skip "remote MGS with nodsh" && return
1157 [ $(lustre_version_code $SINGLEMGS) -lt $(version_code 2.5.53) ] &&
1158 skip "No nodemap on $(get_lustre_version) MGS, need 2.5.53+" &&
1164 [[ $rc != 0 ]] && error "nodemap_add failed with $rc" && return 1
1167 for ((i = 0; i < NODEMAP_COUNT; i++)); do
1168 if ! add_range ${HOSTNAME_CHECKSUM}_${i} $i; then
1172 [[ $rc != 0 ]] && error "nodemap_add_range failed with $rc" && return 2
1177 [[ $rc != 0 ]] && error "nodemap_add_idmap failed with $rc" && return 3
1182 [[ $rc != 0 ]] && error "nodemap_test_id failed with $rc" && return 4
1187 [[ $rc != 0 ]] && error "nodemap_del_idmap failed with $rc" && return 5
1192 [[ $rc != 0 ]] && error "nodemap_delete failed with $rc" && return 6
1196 run_test 15 "test id mapping"
1198 log "cleanup: ======================================================"
1201 ## nodemap deactivated
1202 do_facet mgs lctl nodemap_activate 0
1204 for num in $(seq $MDSCOUNT); do
1205 if [ "${identity_old[$num]}" = 1 ]; then
1206 switch_identity $num false || identity_old[$num]=$?
1210 $RUNAS -u $ID0 ls $DIR
1211 $RUNAS -u $ID1 ls $DIR