summaryrefslogtreecommitdiffstats
diff options
context:
space:
mode:
authorVenky Shankar <vshankar@redhat.com>2014-05-21 14:18:06 +0530
committerVenky Shankar <vshankar@redhat.com>2014-05-25 19:51:59 -0700
commit74cc911d4301905d0722a943ca2b844637d4dc74 (patch)
treec9dec4e5118eb3370fdf52d44890a1544e1bd2ae
parentbbb8313568bd0725f9faf1927ccefe79126a2113 (diff)
gsyncd / geo-rep: Mountbroker cli to use INET sockets
unprivileged geo-replication session runs the slave gsyncd process as unprivileged, thereby executing gluster cli commands as an unprivileged user. By default, cli to glusterd uses unix domain sockets, thereby restricting cli command execution by non root users. This patch introduces '--remote-host' cli option to force cli to use INET socket. For this to work, the following needs to be added in glusterd volfile option rpc-auth-allow-insecure on Change-Id: I84b1711281bbcbde156200f80ebdb065afb55488 BUG: 1077452 Signed-off-by: Venky Shankar <vshankar@redhat.com> Reviewed-on: http://review.gluster.org/7820 Tested-by: Gluster Build System <jenkins@build.gluster.com>
-rw-r--r--geo-replication/syncdaemon/resource.py2
1 files changed, 1 insertions, 1 deletions
diff --git a/geo-replication/syncdaemon/resource.py b/geo-replication/syncdaemon/resource.py
index 79dc9e79e9d..dadfc965336 100644
--- a/geo-replication/syncdaemon/resource.py
+++ b/geo-replication/syncdaemon/resource.py
@@ -1137,7 +1137,7 @@ class GLUSTER(AbstractUrl, SlaveLocal, SlaveRemote):
@classmethod
def make_cli_argv(cls):
- return [cls.get_glusterprog()] + \
+ return [cls.get_glusterprog()] + ['--remote-host=localhost'] + \
gconf.gluster_cli_options.split() + ['system::']
@classmethod