From: Michele Tartara <mtartara@google.com>
Date: Wed, 19 Jun 2013 14:51:57 +0000 (+0000)
Subject: Add confd user to masterd group
X-Git-Tag: v2.8.0beta1~13
X-Git-Url: https://code.grnet.gr/git/ganeti-local/commitdiff_plain/91cdc18f1e908b2ac5cc95dc8f7af3365fb0b6d5

Add confd user to masterd group

The server.pem file is 0440 (materd_uid, masterd_gid) and cannot be
accessed by confd.

This patch contains a workaround for 2.8.0~beta1 (adding conf to the
masterd group in the user setup tool, and remembering the users to
actually execute that tool while upgrading).

This partially fixes Issue 292.

Signed-off-by: Michele Tartara <mtartara@google.com>
Reviewed-by: Klaus Aehlig <aehlig@google.com>
---

diff --git a/UPGRADE b/UPGRADE
index a769b92..0e26892 100644
--- a/UPGRADE
+++ b/UPGRADE
@@ -55,6 +55,11 @@ To run commands on all nodes, the `distributed shell (dsh)
 
     $ /usr/lib/ganeti/ensure-dirs --full-run
 
+#. Create the (missing) required users and make users part of the required
+groups on all nodes::
+
+    $ /usr/lib/ganeti/tools/users-setup
+
 #. Restart daemons on all nodes::
 
     $ /etc/init.d/ganeti restart
diff --git a/tools/users-setup.in b/tools/users-setup.in
index c6ee5a4..f63765b 100644
--- a/tools/users-setup.in
+++ b/tools/users-setup.in
@@ -29,3 +29,4 @@ done
 
 adduser @GNTMASTERUSER@ @GNTCONFDGROUP@
 adduser @GNTMONDUSER@ @GNTMASTERDGROUP@
+adduser @GNTCONFDUSER@ @GNTMASTERDGROUP@