listing a collection in federation results in a "no results found" traceback #132
Comments
|
@kript suggests this might be related to the strictAcl settings |
|
In that all our Zones have a rule of |
|
It'd be great to get some debug logging of the specific query and
invocation..eg what the zone hint is. Also interested to see what is being
queried (the target collection and permissions)..... In a meeting at
moment but we can break out as a GitHub issue, happy to help...
…On Fri, Dec 6, 2019, 10:10 AM John Constable ***@***.***> wrote:
In that all our Zones have a rule of acAclPolicy { }
—
You are receiving this because you are subscribed to this thread.
Reply to this email directly, view it on GitHub
<#132?email_source=notifications&email_token=AAIL4LNDKF5LUK27XRYKBVLQXJTN3A5CNFSM4JWZSCN2YY3PNVWWK3TUL52HS4DFVREXG43VMVBW63LNMVXHJKTDN5WW2ZLOORPWSZGOEGEL2GI#issuecomment-562609433>,
or unsubscribe
<https://github.com/notifications/unsubscribe-auth/AAIL4LOWLSDM4AWD52MUGDLQXJTN3ANCNFSM4JWZSCNQ>
.
|
|
interesting update: metalnx will list the master zone (which is the one you authenticate with), plus 2 of our federated zones, but not the other 2 |
|
I've turned on both debugging options I could find, and captured the following output when triggering the problem: |
|
I see this as the immediate interest: That zone hint is blank and therefore would be looking at the wrong zone when issuing the query. Let me follow that thread through, it may solve the problem. The GenQuery has the zone hint, the specific query does not. |
|
rewriting the resolveMostPermissiveAccessForUser method in PermissionsServiceImpl with the following signature.. public void resolveMostPermissiveAccessForUser(String irodsAbsolutePath, String userName, String userZone) This will simplify, we can drop in some explicit cross-zone hint support as well as a transformation of a user across zones into user#zone format. None of this is in the current, overly elaborate method. |
This was referenced Dec 9, 2019
michael-conway
added a commit
that referenced
this issue
Dec 13, 2019
|
In the stack trace, it appears to be a missing specific query. It's a bit complicated but It looks here that an alias is found with a zone hint of seq-dev and then appears to miss the zone and not find the alias when executing the query proper. The DataNotFound is caused by executing the named query when the alias is missing. This may be complicated by the blank zoneHint shown in the log below. I'm still sorting this out. An interesting data point would be to inspect whether the SpecificQuery 'ShowCollAcls' is available on each zone (iadmin lsq can show this). Sorting out where that blank zoneHint comes from and whether I've fixed it now will take some time. The federation stuff gives one a migrane after a while ;-) |
|
The zone which gives the 500 does have ShowCollAcls defined, none of the others do. I can reproduce this building from master |
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
Steps to reproduce:
authenticate with 1 zone
using Navigation Tools, navigate to a collection in another zone
observe 500
The text was updated successfully, but these errors were encountered: