Task #4184
Story #3736: CN Consistency Check and CN Recovery
Evaluate CN to CN access policy inconsistencies
100%
Description
Due to network partitioning in the production Hazelcast cluster, there is now inconsistent system metadata content across the CNs. Evaluate the extent of the access policy differences. From the etherpad:
For AccessPolicy diff classification:
* SELECT guid, principal_name, permission, perm_type from xml_access ORDER BY guid, principal_name, permission, perm_type;
* output to file
* diff 3 files - evaluate visually using Meld or FileMerge, classify the types of problems, ensure that the CN Audit code being written addresses all classes
History
#1 Updated by Chris Jones over 10 years ago
Initial Evaluation of CN AccessPolicy Discrepancies¶
CN-UCSB is missing 1386 Access Control Rules present on CN-ORC
CN-ORC is missing 52 Access Control Rules present on CN-UCSB
CN-UNM is missing 1386 Access Control Rules present on CN-ORC
CN-ORC is missing 30 Access Control Rules present on CN-UNM
CN-UCSB is missing 25 Access Control Rules present on CN-UNM
CN-UNM is missing 3 Access Control Rules present on CN-UCSB
There are 16 identifiers that may need manual ACL reconciliation across the CNs:¶
autogen.2013061412245323230.1
autogen.2013061413310702892.1
autogen.2012122012391321421.1
autogen.2012122209301298522.1
autogen.2013110415061851620.1
peggym.109896.1
peggym.109898.1
peggym.109899.1
peggym.109900.1
peggym.109901.1
peggym.109902.1
peggym.109904.1
peggym.109905.1
peggym.109906.1
peggym.109907.1
peggym.109908.1
The inconsistency percentage is approximately 0.2% of the total ACLs in the system¶
Total UNM ACLs: 685636
Total UCSB ACLs: 685658
Total ORC ACLs: 686992
The affected authoritative Member Nodes for the inconsistent ACLs include¶
CDL
KNB
SANPARKS
GOA
LTER
#2 Updated by Chris Jones over 10 years ago
- Status changed from New to Closed
- translation missing: en.field_remaining_hours set to 0.0
#3 Updated by Robert Waltz over 10 years ago
- Target version set to 2014.2-Block.1.1
#4 Updated by Robert Waltz about 10 years ago
- Target version deleted (
2014.2-Block.1.1)
