Re: [Savannah-hackers-public] download access for uploading files broken

[Bob Proulx]

> Where do groups come from?
> MySQL on internal0 ! which was just rebooted!
> 
> Then, checking download:/var/log/daemon.log shows clearly:
> ===
> Feb 24 03:03:25 download mountd[4812]: libnss-mysql: Connection to server 
> '208.118.235.75' failed: Lost connection to MySQL server at 'reading initial 
> communication packet', system error: 113
> ===
> 
> and 208.118.235.75 is old 'internal' which was shutdown!
> 
> so somehow, "rpc.mountd" running on old download didn't get the memo :)

Found it!  Here is the sequence.

  mysql> use mysql
  mysql> select Host,User from user;
  +----------------------------+------------------+
  | Host                       | User             |
  +----------------------------+------------------+
  ...

The important parts are:

  | 208.118.235.73             | nss-root         |
  | 208.118.235.73             | nss-user         |
  | download.savannah.gnu.org  | savannahscripts  |

When download.savannah.gnu.org pointed to 208.118.235.73 then things
worked.  But then it pointed to the new download0.  Nothing changed
until mysql was restarted. That lost the access to allow
208.118.235.73 savannahscripts to the database.

  address@hidden:/# /usr/local/bin/sv_get_authorized_keys rwp
  DBI connect('database=savane:host=208.118.235.78:','savannahscripts',...) 
failed: Access denied for user 'savannahscripts'@'208.118.235.73' (using 
password: YES) at /usr/local/share/perl/5.10.0/Savane/DB.pm line 44
  Compilation failed in require at /usr/local/share/perl/5.10.0/Savane.pm line 
34.
  BEGIN failed--compilation aborted at /usr/local/share/perl/5.10.0/Savane.pm 
line 34.
  Compilation failed in require at /usr/local/bin/sv_get_authorized_keys line 4.
  BEGIN failed--compilation aborted at /usr/local/bin/sv_get_authorized_keys 
line 4.

It can't access the database.  Because the download.savannah.gnu.org
name is now changed.  (Which is why I tend to use IP addresses for
such things.)  I added the following access grant.

  mysql> GRANT SELECT, SHOW VIEW ON savane.* TO address@hidden IDENTIFIED BY 
'******';

  address@hidden:/# /usr/local/bin/sv_get_authorized_keys rwp
  ssh-rsa AAAA ...
  ...

Works.  With that I can now copy files to olddownload.  Which is okay.
And I can scp to download0.  But I still cannot rsync to the download0.

That is what changed with the reboot.  The mysql database refroze the
DNS name to the new address for it.

I am still leaning toward a problem with locks over nfs as to why the
rsync isn't working.  But not sure yet.

Bob