From 74cc911d4301905d0722a943ca2b844637d4dc74 Mon Sep 17 00:00:00 2001 From: Venky Shankar Date: Wed, 21 May 2014 14:18:06 +0530 Subject: gsyncd / geo-rep: Mountbroker cli to use INET sockets unprivileged geo-replication session runs the slave gsyncd process as unprivileged, thereby executing gluster cli commands as an unprivileged user. By default, cli to glusterd uses unix domain sockets, thereby restricting cli command execution by non root users. This patch introduces '--remote-host' cli option to force cli to use INET socket. For this to work, the following needs to be added in glusterd volfile option rpc-auth-allow-insecure on Change-Id: I84b1711281bbcbde156200f80ebdb065afb55488 BUG: 1077452 Signed-off-by: Venky Shankar Reviewed-on: http://review.gluster.org/7820 Tested-by: Gluster Build System --- geo-replication/syncdaemon/resource.py | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) (limited to 'geo-replication') diff --git a/geo-replication/syncdaemon/resource.py b/geo-replication/syncdaemon/resource.py index 79dc9e79e9d..dadfc965336 100644 --- a/geo-replication/syncdaemon/resource.py +++ b/geo-replication/syncdaemon/resource.py @@ -1137,7 +1137,7 @@ class GLUSTER(AbstractUrl, SlaveLocal, SlaveRemote): @classmethod def make_cli_argv(cls): - return [cls.get_glusterprog()] + \ + return [cls.get_glusterprog()] + ['--remote-host=localhost'] + \ gconf.gluster_cli_options.split() + ['system::'] @classmethod -- cgit