Project

General

Profile

Task #4184

Story #3736: CN Consistency Check and CN Recovery

Evaluate CN to CN access policy inconsistencies

Added by Chris Jones over 10 years ago. Updated almost 10 years ago.

Status:
Closed
Priority:
Urgent
Assignee:
Category:
Environment.Production
Target version:
-
Start date:
2013-11-22
Due date:
% Done:

100%

Milestone:
None
Product Version:
*
Story Points:
Sprint:

Description

Due to network partitioning in the production Hazelcast cluster, there is now inconsistent system metadata content across the CNs. Evaluate the extent of the access policy differences. From the etherpad:

For AccessPolicy diff classification:
* SELECT guid, principal_name, permission, perm_type from xml_access ORDER BY guid, principal_name, permission, perm_type;
* output to file
* diff 3 files - evaluate visually using Meld or FileMerge, classify the types of problems, ensure that the CN Audit code being written addresses all classes

History

#1 Updated by Chris Jones over 10 years ago

Initial Evaluation of CN AccessPolicy Discrepancies

CN-UCSB is missing 1386 Access Control Rules present on CN-ORC
CN-ORC is missing 52 Access Control Rules present on CN-UCSB

CN-UNM is missing 1386 Access Control Rules present on CN-ORC
CN-ORC is missing 30 Access Control Rules present on CN-UNM

CN-UCSB is missing 25 Access Control Rules present on CN-UNM
CN-UNM is missing 3 Access Control Rules present on CN-UCSB

There are 16 identifiers that may need manual ACL reconciliation across the CNs:

autogen.2013061412245323230.1
autogen.2013061413310702892.1
autogen.2012122012391321421.1
autogen.2012122209301298522.1
autogen.2013110415061851620.1
peggym.109896.1
peggym.109898.1
peggym.109899.1
peggym.109900.1
peggym.109901.1
peggym.109902.1
peggym.109904.1
peggym.109905.1
peggym.109906.1
peggym.109907.1
peggym.109908.1

The inconsistency percentage is approximately 0.2% of the total ACLs in the system

Total UNM ACLs: 685636
Total UCSB ACLs: 685658
Total ORC ACLs: 686992

The affected authoritative Member Nodes for the inconsistent ACLs include

CDL
KNB
SANPARKS
GOA
LTER

#2 Updated by Chris Jones about 10 years ago

  • Status changed from New to Closed
  • translation missing: en.field_remaining_hours set to 0.0

#3 Updated by Robert Waltz about 10 years ago

  • Target version set to 2014.2-Block.1.1

#4 Updated by Robert Waltz almost 10 years ago

  • Target version deleted (2014.2-Block.1.1)

Also available in: Atom PDF

Add picture from clipboard (Maximum size: 14.8 MB)