mainSavannah Administration - Support: sr #109392, CVS access for web pages failed

 
 

sr #109392: CVS access for web pages failed

Submitter:  Heiko Stamer <stamer>
Submitted:  Thu 28 Sep 2017 05:38:41 PM UTC
   
 
Category:  Project webpages Priority:  5 - Normal
Severity:  3 - Normal Status:  Done
Privacy:  Public Assigned to:  rwp
Operating System:  None Open/Closed:  Closed
* Mandatory Fields

Add a New Comment Rich Markup
   

Jump to the original submission

Thu 30 Nov 2017 08:58:44 PM UTC, comment #14: 

It works now. Thank you!

Heiko Stamer <stamer>
Sun 26 Nov 2017 11:18:50 PM UTC, comment #13: 

Sigh. At least we are making progress through the files! :-)

I adjusted those facls.  Please give it another try.

Bob Proulx <rwp>
Site Administrator
Sun 26 Nov 2017 09:03:33 AM UTC, comment #12: 

Thanks for your effort. Now the error message has changed:

$ cvs commit
cvs commit: Examining .
/web/dkgpg/dkgpg/index.html,v  <--  index.html
initial revision: 1.1
cvs commit: warning: cannot open history file `/web/dkgpg/CVSROOT/history' for write: Permission denied
Triggering webpages update...

Heiko Stamer <stamer>
Sat 25 Nov 2017 11:40:18 PM UTC, comment #11: 

I am wondering if there is an errant cronjob that is fighting with me on these files.  The desired facl from a working directory is:

vcs:/# getfacl web/coreutils
# file: web/coreutils
# owner: root
# group: coreutils
# flags: -s-
user::rwx
group::rwx
group:www:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:www:rwx
default:mask::rwx
default:other::r-x

Although that may be overspecified for our needs that listing is a working example.  I had cloned that for both paced-el and dkgpg using this command, it was still in my recall history

vcs:/# getfacl web/coreutils | setfacl --set-file=- web/dkgpg

But at this moment when I look after your latest failure report i see that it has changed.  The bad state is:

vcs:/# getfacl web/dkgpg/dkgpg
# file: web/dkgpg/dkgpg
# owner: root
# group: dkgpg
# flags: -s-
user::rwx
group::r-x
group:www:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::r-x
default:group:www:rwx
default:mask::rwx
default:other::r-x

The "default:group::r-x" part is causing the trouble.  I have reset it, and I will say again since the command for that is still in my recall history.  Plus I had added myself to the project to test the operation.  This is for the subdirectory.

vcs:/# getfacl web/coreutils/coreutils | setfacl --set-file=- web/dkgpg/dkgpg

Please try it again.  Sorry for all of the hassles here.

Bob Proulx <rwp>
Site Administrator
Sat 25 Nov 2017 07:21:49 AM UTC, comment #10: 

Unfortunately, on my side the issue remains (I have checked out the web pages repository again):

$ cvs commit
cvs commit: Examining .
cvs commit: ERROR: cannot write file /web/dkgpg/dkgpg/index.html,v: Permission denied
cvs commit: saving log message in /tmp/cvs5Ey9zv

Heiko Stamer <stamer>
Sat 25 Nov 2017 03:23:24 AM UTC, comment #9: 

This problem is due to incorrect file ACLs.  Please test the access again for both projects.  I believe both of these projects should be working now.

Sorry Heiko for the long delay in debugging this problem.

I am not sure why the facl permissions were incorrect for these.  I need to ensure that all of the projects have the correct facl permissions as I am sure that if these were incorrect that others will be incorrect too.

Bob Proulx <rwp>
Site Administrator
Fri 24 Nov 2017 11:50:08 PM UTC, comment #8: 

I'm experiencing this issue with my project paced.  Here's what I do:

$ cvs -z3 -d:ext:skolar42@cvs.savannah.nongnu.org:/web/paced-el co paced-el
cvs checkout: Updating paced-el
$ cd paced-el/
$ touch index.html
$ cvs add index.html
cvs add: scheduling file `index.html' for addition
cvs add: use `cvs commit' to add this file permanently
$ cvs commit -m "Added documentation" index.html
cvs commit: ERROR: cannot write file /web/paced-el/paced-el/index.html,v: Permission denied

The only bash settings I've changed for CVS are:
CVS_RSH=ssh
CVS_CLIENT_LOG="log"

I can post the log.in and log.out files, if that would help.

I can commit web pages for my project org-edna just fine, as I did a minute prior to first experiencing this problem with paced-el.

Ian Dunn <skolar42>
Mon 02 Oct 2017 08:45:48 PM UTC, comment #7: 

Sorry for the delays in figuring this problem out.  Thank you for the additional information.  That is a slightly different problem however.  That one is due to the www team needing access to the files and therefore ACLs are used to allow it.  I checked and the www ACL looks okay.  But that isn't what is not working for you (and me since I can recreate it) now.  It's still in the top of my queue. I'll work on it some more later today.

Bob Proulx <rwp>
Site Administrator
Mon 02 Oct 2017 02:34:23 PM UTC, comment #6: 
Heiko Stamer <stamer>
Thu 28 Sep 2017 10:16:10 PM UTC, comment #5: 

I added myself to the project so that I could debug the problem.  With that I can recreate the problem with my login.  I see nothing interesting in any of the normal logs.  I will need to instrument things in order to debug this further.

Bob Proulx <rwp>
Site Administrator
Thu 28 Sep 2017 09:24:03 PM UTC, comment #4: 

Ah,

I was thinking of another issue (missing lock directory):
  https://lists.gnu.org/archive/html/savannah-hackers-public/2017-01/msg00045.html

But it is not the case here, as vcs0:/var/lock/cvs/web/dkgpg/ does exist.

Sorry for the noise.
 - assaf

Assaf Gordon <agn>
Site Administrator
Thu 28 Sep 2017 09:18:44 PM UTC, comment #3: 

Hi Bob and all,

Heiko mentioned this is a new repository,
and this reminded me a previous instance:

https://lists.gnu.org/archive/html/savannah-hackers-public/2016-05/msg00022.html

Perhaps related to the fact that the actual CVS repos are nfs-mounted from old VCS, and root-squash prevents something from working ?

I'm almost certain I also handled something similar long ago, can't seem to find it though....

-assaf

Assaf Gordon <agn>
Site Administrator
Thu 28 Sep 2017 09:03:15 PM UTC, comment #2: 

I checked out the repository as explained in the instructions.

$ cat CVS/Root
:ext:stamer@cvs.savannah.nongnu.org:/web/dkgpg

Unfortunately, the result is still the same:

$ cvs commit
cvs commit: Examining .
cvs commit: ERROR: cannot write file /web/dkgpg/dkgpg/index.html,v: Permission denied
cvs commit: saving log message in /tmp/cvsAtOaA2

The webpage access for my other project (libtmcg) works. Thus I guess it is a group permission problem with the new project at the server. What information you need to debug?

Heiko Stamer <stamer>
Thu 28 Sep 2017 08:38:57 PM UTC, comment #1: 

I examined your project setup and configuration on the server and I did not find anything out of the ordinary.  Therefore we need more information.

How did you checkout your working copy?  Did you by happenstance checkout using the anonymous pserver instead of your ssh login?  So update you will need the "Project Member CVS Access via SSH" instructions at https://savannah.nongnu.org/cvs/?group=dkgpg in order to be able to commit.

You can check on how you did the checkout by looking at any of the CVS/Root files.  It should say something like this:

  cat CVS/Root
    :ext:stamer@cvs.savannah.gnu.org:/webcvs/dkgpg

  cvs -z3 -d:ext:stamer@cvs.savannah.nongnu.org:/web/dkgpg co dkgpg

If that isn't the problem then we will need more information to debug it further.

Bob Proulx <rwp>
Site Administrator
Thu 28 Sep 2017 05:38:41 PM UTC, original submission:  

When uploading a webpage for my new project I got the following permission error:

$ cvs commit
cvs commit: Examining .
cvs commit: ERROR: cannot write file /web/dkgpg/dkgpg/index.html,v: Permission denied

Heiko Stamer <stamer>

 

(Note: upload size limit is set to 16384 kB, after insertion of the required escape characters.)

Attach Files:
   
   
Comment:
   

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -email is unavailable- added by skolar42 (Posted a comment)
  • -email is unavailable- added by agn (Posted a comment)
  • -email is unavailable- added by rwp (Posted a comment)
  • -email is unavailable- added by stamer (Submitted the item)
  •  

    There are 0 votes so far. Votes easily highlight which items people would like to see resolved in priority, independently of the priority of the item set by tracker managers.

    Only logged-in users can vote.

     

    Follow 4 latest changes.

    Date Changed by Updated Field Previous Value => Replaced by
    2017-11-25 rwp StatusNeed Info Done
        Open/ClosedOpen Closed
    2017-09-28 rwp StatusNone Need Info
        Assigned toNone rwp

    Back to the top

    Powered by Savane 3.13-4448.
    Corresponding source code