[Monotone-devel] beginner's question: write permission prob

[Joe Brenner]

I'm trying to get a simple monotone setup working over my internal
network, and I'm seeing a permissions problem: I can get read access,
but not write access.  I've run out of ideas for things to check, and
I'm looking for suggestions.

A pull command on the client works without any problem:

   mtn --db=/var/mtn/wudan.mtn pull address@hidden 192.168.1.3 com.or.t1

(Note here the "client" is 192.168.1.144, aka "dancer",
and the "server" is 192.168.1.3, aka "fineline").

But when I issue the sync command on the client:

   mtn --db=/var/mtn/wudan.mtn sync 192.168.1.3 com.or.t1

I get the following messages:

   mtn: connecting to 192.168.1.3
   mtn: finding items to synchronize:
   mtn: ticks: c="certificates"/256, k="keys"/1, r="revisions"/64
   mtn: ckr
   mtn: warning: protocol error while processing peer 192.168.1.3: 'received 
network error: denied 'address@hidden' write permission for 'com.or.t1' 
excluding '''
   mtn: ticks: >="bytes in"/1024, <="bytes out"/1024, r="revs in"/1, R="revs 
out"/1
   mtn: ><rR
   mtn: error: processing failure while talking to peer 192.168.1.3, 
disconnecting


The error messages on the server side looks like:

   mtn: beginning service on <all interfaces> : 4691
   mtn: accepted new client connection from 192.168.1.144 : 50787
   mtn: allowed 'address@hidden' read permission for 'com.or.t1' excluding ''
   mtn: warning: error: denied 'address@hidden' write permission for 
'com.or.t1' excluding ''
   mtn: peer 192.168.1.144:50787 write failed in working state (error)


The details on the setup are like this:

Both client and server are GNU/linux machines with monotone 0.30
installed (and I just upgraded to 0.35 and tried again -- with a new
db -- and got similar results).  Both machines are AMD64 based, though
the client is running a 32 bit installation of Knoppix and the server
is a 64 bit Kubuntu.

On the server:

~/.monotone/write-permissions:

  address@hidden

~/.monotone/read-permissions:

  pattern "*"
  allow "address@hidden"

~/.monotone/monotonerc:

  function get_passphrase(keypair_id)
    return "XXX"
  end

  function get_netsync_read_permitted (collection, identity)
  if (identity == "address@hidden") then return true end
    return false
  end

  function get_netsync_write_permitted (collection, identity)
    if (identity == "address@hidden") then return true end
    return false
  end

  function get_netsync_anonymous_read_permitted (collection)
    return false
  end


On the client:

~/.monotone/monotonerc:

  function get_passphrase(keypair_id)
     return "YYY"
  end

Previously I've done the key exchange like so:

On the client:

  mtn genkey address@hidden > ~/doom-t1-dancer.pubkey
  (with passphrase matching the "XXX" above).

  scp ~/doom-t1-dancer.pubkey address@hidden:~/

Then on the server:

  cat ~/doom-t1-dancer.pubkey |  mtn --db=/var/mtn/wudan.mtn read