From e5a812082ae033afb1eed82c0f2df3d0f6bdc93f Mon Sep 17 00:00:00 2001 From: Daniel Baumann Date: Wed, 17 Apr 2024 08:53:20 +0200 Subject: Adding upstream version 2.1.6. Signed-off-by: Daniel Baumann --- cts/cli/regression.acls.exp | 4408 +++++++++++++++++++++++++++++++++++++++++++ 1 file changed, 4408 insertions(+) create mode 100644 cts/cli/regression.acls.exp (limited to 'cts/cli/regression.acls.exp') diff --git a/cts/cli/regression.acls.exp b/cts/cli/regression.acls.exp new file mode 100644 index 0000000..c0b0c4f --- /dev/null +++ b/cts/cli/regression.acls.exp @@ -0,0 +1,4408 @@ +Created new pacemaker configuration +A new shadow instance was created. To begin using it, enter the following into your shell: + export CIB_shadow=cts-cli +=#=#=#= Begin test: Configure some ACLs =#=#=#= +=#=#=#= Current cib after: Configure some ACLs =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: Configure some ACLs - OK (0) =#=#=#= +* Passed: cibadmin - Configure some ACLs +=#=#=#= Begin test: Enable ACLs =#=#=#= +=#=#=#= Current cib after: Enable ACLs =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: Enable ACLs - OK (0) =#=#=#= +* Passed: crm_attribute - Enable ACLs +=#=#=#= Begin test: Set cluster option =#=#=#= +=#=#=#= Current cib after: Set cluster option =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: Set cluster option - OK (0) =#=#=#= +* Passed: crm_attribute - Set cluster option +=#=#=#= Begin test: New ACL =#=#=#= +=#=#=#= Current cib after: New ACL =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: New ACL - OK (0) =#=#=#= +* Passed: cibadmin - New ACL +=#=#=#= Begin test: Another ACL =#=#=#= +=#=#=#= Current cib after: Another ACL =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: Another ACL - OK (0) =#=#=#= +* Passed: cibadmin - Another ACL +=#=#=#= Begin test: Updated ACL =#=#=#= +=#=#=#= Current cib after: Updated ACL =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: Updated ACL - OK (0) =#=#=#= +* Passed: cibadmin - Updated ACL +=#=#=#= Begin test: unknownguy: Query configuration =#=#=#= +Call failed: Permission denied +=#=#=#= End test: unknownguy: Query configuration - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - unknownguy: Query configuration +=#=#=#= Begin test: unknownguy: Set enable-acl =#=#=#= +crm_attribute: Error performing operation: Permission denied +=#=#=#= End test: unknownguy: Set enable-acl - Insufficient privileges (4) =#=#=#= +* Passed: crm_attribute - unknownguy: Set enable-acl +=#=#=#= Begin test: unknownguy: Set stonith-enabled =#=#=#= +crm_attribute: Error performing operation: Permission denied +=#=#=#= End test: unknownguy: Set stonith-enabled - Insufficient privileges (4) =#=#=#= +* Passed: crm_attribute - unknownguy: Set stonith-enabled +=#=#=#= Begin test: unknownguy: Create a resource =#=#=#= +pcmk__check_acl trace: User 'unknownguy' without ACLs denied read/write access to /cib/configuration/resources/primitive[@id] +pcmk__apply_creation_acl trace: Creation of scaffolding with id="" is implicitly allowed +Call failed: Permission denied + + + + + +=#=#=#= End test: unknownguy: Create a resource - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - unknownguy: Create a resource +=#=#=#= Begin test: l33t-haxor: Query configuration =#=#=#= +Call failed: Permission denied +=#=#=#= End test: l33t-haxor: Query configuration - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - l33t-haxor: Query configuration +=#=#=#= Begin test: l33t-haxor: Set enable-acl =#=#=#= +crm_attribute: Error performing operation: Permission denied +=#=#=#= End test: l33t-haxor: Set enable-acl - Insufficient privileges (4) =#=#=#= +* Passed: crm_attribute - l33t-haxor: Set enable-acl +=#=#=#= Begin test: l33t-haxor: Set stonith-enabled =#=#=#= +crm_attribute: Error performing operation: Permission denied +=#=#=#= End test: l33t-haxor: Set stonith-enabled - Insufficient privileges (4) =#=#=#= +* Passed: crm_attribute - l33t-haxor: Set stonith-enabled +=#=#=#= Begin test: l33t-haxor: Create a resource =#=#=#= +pcmk__check_acl trace: Parent ACL denies user 'l33t-haxor' read/write access to /cib/configuration/resources/primitive[@id='dummy'] +pcmk__apply_creation_acl trace: ACLs disallow creation of with id="dummy" +Call failed: Permission denied +=#=#=#= End test: l33t-haxor: Create a resource - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - l33t-haxor: Create a resource +=#=#=#= Begin test: niceguy: Query configuration =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Query configuration - OK (0) =#=#=#= +* Passed: cibadmin - niceguy: Query configuration +=#=#=#= Begin test: niceguy: Set enable-acl =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/crm_config/cluster_property_set[@id='cib-bootstrap-options']/nvpair[@id='cib-bootstrap-options-enable-acl'][@value] +Error setting enable-acl=false (section=crm_config, set=): Permission denied +crm_attribute: Error performing operation: Permission denied +=#=#=#= End test: niceguy: Set enable-acl - Insufficient privileges (4) =#=#=#= +* Passed: crm_attribute - niceguy: Set enable-acl +=#=#=#= Begin test: niceguy: Set stonith-enabled =#=#=#= +pcmk__apply_creation_acl trace: ACLs allow creation of with id="cib-bootstrap-options-stonith-enabled" +=#=#=#= Current cib after: niceguy: Set stonith-enabled =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Set stonith-enabled - OK (0) =#=#=#= +* Passed: crm_attribute - niceguy: Set stonith-enabled +=#=#=#= Begin test: niceguy: Create a resource =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/resources/primitive[@id='dummy'] +pcmk__apply_creation_acl trace: ACLs disallow creation of with id="dummy" +Call failed: Permission denied +=#=#=#= End test: niceguy: Create a resource - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Create a resource +=#=#=#= Begin test: root: Query configuration =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: root: Query configuration - OK (0) =#=#=#= +* Passed: cibadmin - root: Query configuration +=#=#=#= Begin test: root: Set stonith-enabled =#=#=#= +=#=#=#= Current cib after: root: Set stonith-enabled =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: root: Set stonith-enabled - OK (0) =#=#=#= +* Passed: crm_attribute - root: Set stonith-enabled +=#=#=#= Begin test: root: Create a resource =#=#=#= +=#=#=#= Current cib after: root: Create a resource =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: root: Create a resource - OK (0) =#=#=#= +* Passed: cibadmin - root: Create a resource +=#=#=#= Begin test: l33t-haxor: Create a resource meta attribute =#=#=#= +crm_resource: Error performing operation: Insufficient privileges +=#=#=#= End test: l33t-haxor: Create a resource meta attribute - Insufficient privileges (4) =#=#=#= +* Passed: crm_resource - l33t-haxor: Create a resource meta attribute +=#=#=#= Begin test: l33t-haxor: Query a resource meta attribute =#=#=#= +crm_resource: Error performing operation: Insufficient privileges +=#=#=#= End test: l33t-haxor: Query a resource meta attribute - Insufficient privileges (4) =#=#=#= +* Passed: crm_resource - l33t-haxor: Query a resource meta attribute +=#=#=#= Begin test: l33t-haxor: Remove a resource meta attribute =#=#=#= +crm_resource: Error performing operation: Insufficient privileges +=#=#=#= End test: l33t-haxor: Remove a resource meta attribute - Insufficient privileges (4) =#=#=#= +* Passed: crm_resource - l33t-haxor: Remove a resource meta attribute +=#=#=#= Begin test: niceguy: Create a resource meta attribute =#=#=#= +unpack_resources error: Resource start-up disabled since no STONITH resources have been defined +unpack_resources error: Either configure some or disable STONITH with the stonith-enabled option +unpack_resources error: NOTE: Clusters with shared data need STONITH to ensure data integrity +pcmk__apply_creation_acl trace: Creation of scaffolding with id="dummy-meta_attributes" is implicitly allowed +pcmk__apply_creation_acl trace: ACLs allow creation of with id="dummy-meta_attributes-target-role" +Set 'dummy' option: id=dummy-meta_attributes-target-role set=dummy-meta_attributes name=target-role value=Stopped +=#=#=#= Current cib after: niceguy: Create a resource meta attribute =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Create a resource meta attribute - OK (0) =#=#=#= +* Passed: crm_resource - niceguy: Create a resource meta attribute +=#=#=#= Begin test: niceguy: Query a resource meta attribute =#=#=#= +unpack_resources error: Resource start-up disabled since no STONITH resources have been defined +unpack_resources error: Either configure some or disable STONITH with the stonith-enabled option +unpack_resources error: NOTE: Clusters with shared data need STONITH to ensure data integrity +Stopped +=#=#=#= Current cib after: niceguy: Query a resource meta attribute =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Query a resource meta attribute - OK (0) =#=#=#= +* Passed: crm_resource - niceguy: Query a resource meta attribute +=#=#=#= Begin test: niceguy: Remove a resource meta attribute =#=#=#= +unpack_resources error: Resource start-up disabled since no STONITH resources have been defined +unpack_resources error: Either configure some or disable STONITH with the stonith-enabled option +unpack_resources error: NOTE: Clusters with shared data need STONITH to ensure data integrity +Deleted 'dummy' option: id=dummy-meta_attributes-target-role name=target-role +=#=#=#= Current cib after: niceguy: Remove a resource meta attribute =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Remove a resource meta attribute - OK (0) =#=#=#= +* Passed: crm_resource - niceguy: Remove a resource meta attribute +=#=#=#= Begin test: niceguy: Create a resource meta attribute =#=#=#= +unpack_resources error: Resource start-up disabled since no STONITH resources have been defined +unpack_resources error: Either configure some or disable STONITH with the stonith-enabled option +unpack_resources error: NOTE: Clusters with shared data need STONITH to ensure data integrity +pcmk__apply_creation_acl trace: ACLs allow creation of with id="dummy-meta_attributes-target-role" +Set 'dummy' option: id=dummy-meta_attributes-target-role set=dummy-meta_attributes name=target-role value=Started +=#=#=#= Current cib after: niceguy: Create a resource meta attribute =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Create a resource meta attribute - OK (0) =#=#=#= +* Passed: crm_resource - niceguy: Create a resource meta attribute +=#=#=#= Begin test: badidea: Query configuration - implied deny =#=#=#= + + + + + + + + + + + +=#=#=#= End test: badidea: Query configuration - implied deny - OK (0) =#=#=#= +* Passed: cibadmin - badidea: Query configuration - implied deny +=#=#=#= Begin test: betteridea: Query configuration - explicit deny =#=#=#= + + + + + + + + + + + +=#=#=#= End test: betteridea: Query configuration - explicit deny - OK (0) =#=#=#= +* Passed: cibadmin - betteridea: Query configuration - explicit deny + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: niceguy: Replace - remove acls =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib[@epoch] +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/acls +Call failed: Permission denied +=#=#=#= End test: niceguy: Replace - remove acls - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Replace - remove acls + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: niceguy: Replace - create resource =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib[@epoch] +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/resources/primitive[@id='dummy2'] +pcmk__apply_creation_acl trace: ACLs disallow creation of with id="dummy2" +Call failed: Permission denied +=#=#=#= End test: niceguy: Replace - create resource - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Replace - create resource + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: niceguy: Replace - modify attribute (deny) =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib[@epoch] +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/crm_config/cluster_property_set[@id='cib-bootstrap-options']/nvpair[@id='cib-bootstrap-options-enable-acl'][@value] +Call failed: Permission denied +=#=#=#= End test: niceguy: Replace - modify attribute (deny) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Replace - modify attribute (deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: niceguy: Replace - delete attribute (deny) =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib[@epoch] +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/crm_config/cluster_property_set[@id='cib-bootstrap-options']/nvpair[@id='cib-bootstrap-options-enable-acl'] +Call failed: Permission denied +=#=#=#= End test: niceguy: Replace - delete attribute (deny) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Replace - delete attribute (deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: niceguy: Replace - create attribute (deny) =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib[@epoch] +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/resources/primitive[@id='dummy'][@description] +Call failed: Permission denied +=#=#=#= End test: niceguy: Replace - create attribute (deny) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Replace - create attribute (deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: bob: Replace - create attribute (direct allow) =#=#=#= +=#=#=#= End test: bob: Replace - create attribute (direct allow) - OK (0) =#=#=#= +* Passed: cibadmin - bob: Replace - create attribute (direct allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: bob: Replace - modify attribute (direct allow) =#=#=#= +=#=#=#= End test: bob: Replace - modify attribute (direct allow) - OK (0) =#=#=#= +* Passed: cibadmin - bob: Replace - modify attribute (direct allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: bob: Replace - delete attribute (direct allow) =#=#=#= +=#=#=#= End test: bob: Replace - delete attribute (direct allow) - OK (0) =#=#=#= +* Passed: cibadmin - bob: Replace - delete attribute (direct allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: joe: Replace - create attribute (inherited allow) =#=#=#= +=#=#=#= End test: joe: Replace - create attribute (inherited allow) - OK (0) =#=#=#= +* Passed: cibadmin - joe: Replace - create attribute (inherited allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: joe: Replace - modify attribute (inherited allow) =#=#=#= +=#=#=#= End test: joe: Replace - modify attribute (inherited allow) - OK (0) =#=#=#= +* Passed: cibadmin - joe: Replace - modify attribute (inherited allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: joe: Replace - delete attribute (inherited allow) =#=#=#= +=#=#=#= End test: joe: Replace - delete attribute (inherited allow) - OK (0) =#=#=#= +* Passed: cibadmin - joe: Replace - delete attribute (inherited allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: mike: Replace - create attribute (allow overrides deny) =#=#=#= +=#=#=#= End test: mike: Replace - create attribute (allow overrides deny) - OK (0) =#=#=#= +* Passed: cibadmin - mike: Replace - create attribute (allow overrides deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: mike: Replace - modify attribute (allow overrides deny) =#=#=#= +=#=#=#= End test: mike: Replace - modify attribute (allow overrides deny) - OK (0) =#=#=#= +* Passed: cibadmin - mike: Replace - modify attribute (allow overrides deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: mike: Replace - delete attribute (allow overrides deny) =#=#=#= +=#=#=#= End test: mike: Replace - delete attribute (allow overrides deny) - OK (0) =#=#=#= +* Passed: cibadmin - mike: Replace - delete attribute (allow overrides deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: chris: Replace - create attribute (deny overrides allow) =#=#=#= +pcmk__check_acl trace: Parent ACL denies user 'chris' read/write access to /cib/configuration/resources/primitive[@id='dummy'][@description] +Call failed: Permission denied +=#=#=#= End test: chris: Replace - create attribute (deny overrides allow) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - chris: Replace - create attribute (deny overrides allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: chris: Replace - modify attribute (deny overrides allow) =#=#=#= +pcmk__check_acl trace: Parent ACL denies user 'chris' read/write access to /cib/configuration/resources/primitive[@id='dummy'][@description] +Call failed: Permission denied +=#=#=#= End test: chris: Replace - modify attribute (deny overrides allow) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - chris: Replace - modify attribute (deny overrides allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: chris: Replace - delete attribute (deny overrides allow) =#=#=#= +pcmk__check_acl trace: Parent ACL denies user 'chris' read/write access to /cib/configuration/resources/primitive[@id='dummy'] +Call failed: Permission denied +=#=#=#= End test: chris: Replace - delete attribute (deny overrides allow) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - chris: Replace - delete attribute (deny overrides allow) + + + !#!#!#!#! Upgrading to latest CIB schema and re-testing !#!#!#!#! +=#=#=#= Begin test: root: Upgrade to latest CIB schema =#=#=#= +=#=#=#= Current cib after: root: Upgrade to latest CIB schema =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: root: Upgrade to latest CIB schema - OK (0) =#=#=#= +* Passed: cibadmin - root: Upgrade to latest CIB schema +=#=#=#= Begin test: unknownguy: Query configuration =#=#=#= +Call failed: Permission denied +=#=#=#= End test: unknownguy: Query configuration - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - unknownguy: Query configuration +=#=#=#= Begin test: unknownguy: Set enable-acl =#=#=#= +crm_attribute: Error performing operation: Permission denied +=#=#=#= End test: unknownguy: Set enable-acl - Insufficient privileges (4) =#=#=#= +* Passed: crm_attribute - unknownguy: Set enable-acl +=#=#=#= Begin test: unknownguy: Set stonith-enabled =#=#=#= +crm_attribute: Error performing operation: Permission denied +=#=#=#= End test: unknownguy: Set stonith-enabled - Insufficient privileges (4) =#=#=#= +* Passed: crm_attribute - unknownguy: Set stonith-enabled +=#=#=#= Begin test: unknownguy: Create a resource =#=#=#= +pcmk__check_acl trace: User 'unknownguy' without ACLs denied read/write access to /cib/configuration/resources/primitive[@id] +pcmk__apply_creation_acl trace: Creation of scaffolding with id="" is implicitly allowed +Call failed: Permission denied + + + + + +=#=#=#= End test: unknownguy: Create a resource - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - unknownguy: Create a resource +=#=#=#= Begin test: l33t-haxor: Query configuration =#=#=#= +Call failed: Permission denied +=#=#=#= End test: l33t-haxor: Query configuration - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - l33t-haxor: Query configuration +=#=#=#= Begin test: l33t-haxor: Set enable-acl =#=#=#= +crm_attribute: Error performing operation: Permission denied +=#=#=#= End test: l33t-haxor: Set enable-acl - Insufficient privileges (4) =#=#=#= +* Passed: crm_attribute - l33t-haxor: Set enable-acl +=#=#=#= Begin test: l33t-haxor: Set stonith-enabled =#=#=#= +crm_attribute: Error performing operation: Permission denied +=#=#=#= End test: l33t-haxor: Set stonith-enabled - Insufficient privileges (4) =#=#=#= +* Passed: crm_attribute - l33t-haxor: Set stonith-enabled +=#=#=#= Begin test: l33t-haxor: Create a resource =#=#=#= +pcmk__check_acl trace: Parent ACL denies user 'l33t-haxor' read/write access to /cib/configuration/resources/primitive[@id='dummy'] +pcmk__apply_creation_acl trace: ACLs disallow creation of with id="dummy" +Call failed: Permission denied +=#=#=#= End test: l33t-haxor: Create a resource - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - l33t-haxor: Create a resource +=#=#=#= Begin test: niceguy: Query configuration =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Query configuration - OK (0) =#=#=#= +* Passed: cibadmin - niceguy: Query configuration +=#=#=#= Begin test: niceguy: Set enable-acl =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/crm_config/cluster_property_set[@id='cib-bootstrap-options']/nvpair[@id='cib-bootstrap-options-enable-acl'][@value] +Error setting enable-acl=false (section=crm_config, set=): Permission denied +crm_attribute: Error performing operation: Permission denied +=#=#=#= End test: niceguy: Set enable-acl - Insufficient privileges (4) =#=#=#= +* Passed: crm_attribute - niceguy: Set enable-acl +=#=#=#= Begin test: niceguy: Set stonith-enabled =#=#=#= +=#=#=#= Current cib after: niceguy: Set stonith-enabled =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Set stonith-enabled - OK (0) =#=#=#= +* Passed: crm_attribute - niceguy: Set stonith-enabled +=#=#=#= Begin test: niceguy: Create a resource =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/resources/primitive[@id='dummy'] +pcmk__apply_creation_acl trace: ACLs disallow creation of with id="dummy" +Call failed: Permission denied +=#=#=#= End test: niceguy: Create a resource - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Create a resource +=#=#=#= Begin test: root: Query configuration =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: root: Query configuration - OK (0) =#=#=#= +* Passed: cibadmin - root: Query configuration +=#=#=#= Begin test: root: Set stonith-enabled =#=#=#= +=#=#=#= Current cib after: root: Set stonith-enabled =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: root: Set stonith-enabled - OK (0) =#=#=#= +* Passed: crm_attribute - root: Set stonith-enabled +=#=#=#= Begin test: root: Create a resource =#=#=#= +=#=#=#= Current cib after: root: Create a resource =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: root: Create a resource - OK (0) =#=#=#= +* Passed: cibadmin - root: Create a resource +=#=#=#= Begin test: l33t-haxor: Create a resource meta attribute =#=#=#= +crm_resource: Error performing operation: Insufficient privileges +=#=#=#= End test: l33t-haxor: Create a resource meta attribute - Insufficient privileges (4) =#=#=#= +* Passed: crm_resource - l33t-haxor: Create a resource meta attribute +=#=#=#= Begin test: l33t-haxor: Query a resource meta attribute =#=#=#= +crm_resource: Error performing operation: Insufficient privileges +=#=#=#= End test: l33t-haxor: Query a resource meta attribute - Insufficient privileges (4) =#=#=#= +* Passed: crm_resource - l33t-haxor: Query a resource meta attribute +=#=#=#= Begin test: l33t-haxor: Remove a resource meta attribute =#=#=#= +crm_resource: Error performing operation: Insufficient privileges +=#=#=#= End test: l33t-haxor: Remove a resource meta attribute - Insufficient privileges (4) =#=#=#= +* Passed: crm_resource - l33t-haxor: Remove a resource meta attribute +=#=#=#= Begin test: niceguy: Create a resource meta attribute =#=#=#= +unpack_resources error: Resource start-up disabled since no STONITH resources have been defined +unpack_resources error: Either configure some or disable STONITH with the stonith-enabled option +unpack_resources error: NOTE: Clusters with shared data need STONITH to ensure data integrity +pcmk__apply_creation_acl trace: Creation of scaffolding with id="dummy-meta_attributes" is implicitly allowed +pcmk__apply_creation_acl trace: ACLs allow creation of with id="dummy-meta_attributes-target-role" +Set 'dummy' option: id=dummy-meta_attributes-target-role set=dummy-meta_attributes name=target-role value=Stopped +=#=#=#= Current cib after: niceguy: Create a resource meta attribute =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Create a resource meta attribute - OK (0) =#=#=#= +* Passed: crm_resource - niceguy: Create a resource meta attribute +=#=#=#= Begin test: niceguy: Query a resource meta attribute =#=#=#= +unpack_resources error: Resource start-up disabled since no STONITH resources have been defined +unpack_resources error: Either configure some or disable STONITH with the stonith-enabled option +unpack_resources error: NOTE: Clusters with shared data need STONITH to ensure data integrity +Stopped +=#=#=#= Current cib after: niceguy: Query a resource meta attribute =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Query a resource meta attribute - OK (0) =#=#=#= +* Passed: crm_resource - niceguy: Query a resource meta attribute +=#=#=#= Begin test: niceguy: Remove a resource meta attribute =#=#=#= +unpack_resources error: Resource start-up disabled since no STONITH resources have been defined +unpack_resources error: Either configure some or disable STONITH with the stonith-enabled option +unpack_resources error: NOTE: Clusters with shared data need STONITH to ensure data integrity +Deleted 'dummy' option: id=dummy-meta_attributes-target-role name=target-role +=#=#=#= Current cib after: niceguy: Remove a resource meta attribute =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Remove a resource meta attribute - OK (0) =#=#=#= +* Passed: crm_resource - niceguy: Remove a resource meta attribute +=#=#=#= Begin test: niceguy: Create a resource meta attribute =#=#=#= +unpack_resources error: Resource start-up disabled since no STONITH resources have been defined +unpack_resources error: Either configure some or disable STONITH with the stonith-enabled option +unpack_resources error: NOTE: Clusters with shared data need STONITH to ensure data integrity +pcmk__apply_creation_acl trace: ACLs allow creation of with id="dummy-meta_attributes-target-role" +Set 'dummy' option: id=dummy-meta_attributes-target-role set=dummy-meta_attributes name=target-role value=Started +=#=#=#= Current cib after: niceguy: Create a resource meta attribute =#=#=#= + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= End test: niceguy: Create a resource meta attribute - OK (0) =#=#=#= +* Passed: crm_resource - niceguy: Create a resource meta attribute +=#=#=#= Begin test: badidea: Query configuration - implied deny =#=#=#= + + + + + + + + + + + +=#=#=#= End test: badidea: Query configuration - implied deny - OK (0) =#=#=#= +* Passed: cibadmin - badidea: Query configuration - implied deny +=#=#=#= Begin test: betteridea: Query configuration - explicit deny =#=#=#= + + + + + + + + + + + +=#=#=#= End test: betteridea: Query configuration - explicit deny - OK (0) =#=#=#= +* Passed: cibadmin - betteridea: Query configuration - explicit deny + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: niceguy: Replace - remove acls =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib[@epoch] +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/acls +Call failed: Permission denied +=#=#=#= End test: niceguy: Replace - remove acls - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Replace - remove acls + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: niceguy: Replace - create resource =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib[@epoch] +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/resources/primitive[@id='dummy2'] +pcmk__apply_creation_acl trace: ACLs disallow creation of with id="dummy2" +Call failed: Permission denied +=#=#=#= End test: niceguy: Replace - create resource - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Replace - create resource + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: niceguy: Replace - modify attribute (deny) =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib[@epoch] +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/crm_config/cluster_property_set[@id='cib-bootstrap-options']/nvpair[@id='cib-bootstrap-options-enable-acl'][@value] +Call failed: Permission denied +=#=#=#= End test: niceguy: Replace - modify attribute (deny) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Replace - modify attribute (deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: niceguy: Replace - delete attribute (deny) =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib[@epoch] +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/crm_config/cluster_property_set[@id='cib-bootstrap-options']/nvpair[@id='cib-bootstrap-options-enable-acl'] +Call failed: Permission denied +=#=#=#= End test: niceguy: Replace - delete attribute (deny) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Replace - delete attribute (deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: niceguy: Replace - create attribute (deny) =#=#=#= +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib[@epoch] +pcmk__check_acl trace: Default ACL denies user 'niceguy' read/write access to /cib/configuration/resources/primitive[@id='dummy'][@description] +Call failed: Permission denied +=#=#=#= End test: niceguy: Replace - create attribute (deny) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - niceguy: Replace - create attribute (deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: bob: Replace - create attribute (direct allow) =#=#=#= +=#=#=#= End test: bob: Replace - create attribute (direct allow) - OK (0) =#=#=#= +* Passed: cibadmin - bob: Replace - create attribute (direct allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: bob: Replace - modify attribute (direct allow) =#=#=#= +=#=#=#= End test: bob: Replace - modify attribute (direct allow) - OK (0) =#=#=#= +* Passed: cibadmin - bob: Replace - modify attribute (direct allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: bob: Replace - delete attribute (direct allow) =#=#=#= +=#=#=#= End test: bob: Replace - delete attribute (direct allow) - OK (0) =#=#=#= +* Passed: cibadmin - bob: Replace - delete attribute (direct allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: joe: Replace - create attribute (inherited allow) =#=#=#= +=#=#=#= End test: joe: Replace - create attribute (inherited allow) - OK (0) =#=#=#= +* Passed: cibadmin - joe: Replace - create attribute (inherited allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: joe: Replace - modify attribute (inherited allow) =#=#=#= +=#=#=#= End test: joe: Replace - modify attribute (inherited allow) - OK (0) =#=#=#= +* Passed: cibadmin - joe: Replace - modify attribute (inherited allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: joe: Replace - delete attribute (inherited allow) =#=#=#= +=#=#=#= End test: joe: Replace - delete attribute (inherited allow) - OK (0) =#=#=#= +* Passed: cibadmin - joe: Replace - delete attribute (inherited allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: mike: Replace - create attribute (allow overrides deny) =#=#=#= +=#=#=#= End test: mike: Replace - create attribute (allow overrides deny) - OK (0) =#=#=#= +* Passed: cibadmin - mike: Replace - create attribute (allow overrides deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: mike: Replace - modify attribute (allow overrides deny) =#=#=#= +=#=#=#= End test: mike: Replace - modify attribute (allow overrides deny) - OK (0) =#=#=#= +* Passed: cibadmin - mike: Replace - modify attribute (allow overrides deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: mike: Replace - delete attribute (allow overrides deny) =#=#=#= +=#=#=#= End test: mike: Replace - delete attribute (allow overrides deny) - OK (0) =#=#=#= +* Passed: cibadmin - mike: Replace - delete attribute (allow overrides deny) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: chris: Replace - create attribute (deny overrides allow) =#=#=#= +pcmk__check_acl trace: Parent ACL denies user 'chris' read/write access to /cib/configuration/resources/primitive[@id='dummy'][@description] +Call failed: Permission denied +=#=#=#= End test: chris: Replace - create attribute (deny overrides allow) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - chris: Replace - create attribute (deny overrides allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: chris: Replace - modify attribute (deny overrides allow) =#=#=#= +pcmk__check_acl trace: Parent ACL denies user 'chris' read/write access to /cib/configuration/resources/primitive[@id='dummy'][@description] +Call failed: Permission denied +=#=#=#= End test: chris: Replace - modify attribute (deny overrides allow) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - chris: Replace - modify attribute (deny overrides allow) + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + + +=#=#=#= Begin test: chris: Replace - delete attribute (deny overrides allow) =#=#=#= +pcmk__check_acl trace: Parent ACL denies user 'chris' read/write access to /cib/configuration/resources/primitive[@id='dummy'] +Call failed: Permission denied +=#=#=#= End test: chris: Replace - delete attribute (deny overrides allow) - Insufficient privileges (4) =#=#=#= +* Passed: cibadmin - chris: Replace - delete attribute (deny overrides allow) -- cgit v1.2.3