-----============= acceptance-small: sanity-sec ============----- Thu Sep 17 16:32:35 EDT 2026
MGS_OS_ID_LIKE=rhel centos fedora rocky
MGS_OS_VERSION_ID=8.10
MGS_OS_ID=rocky
MGS_OS_VERSION_CODE=134873088
MDS1_OS_VERSION_ID=8.10
MDS1_OS_VERSION_CODE=134873088
MDS1_OS_ID_LIKE=rhel centos fedora rocky
MDS1_OS_ID=rocky
OST1_OS_VERSION_CODE=134873088
OST1_OS_ID_LIKE=rhel centos fedora rocky
OST1_OS_VERSION_ID=8.10
OST1_OS_ID=rocky
CLIENT_OS_ID=rocky
CLIENT_OS_VERSION_CODE=134873088
CLIENT_OS_VERSION_ID=8.10
CLIENT_OS_ID_LIKE=rhel centos fedora rocky
client=34683431 MDS=34683431 OSS=34683431
oleg446-server: /home/green/git/lustre-release/lustre/tests/except/sanity-sec.ex
- see CLIENT_VERSION >= v2_16_57-13-g40cd140b85 (34683431 >= 34617613) for LU-18357, go 27a 27b
excepting tests: 
skipping tests SLOW=no: 26
was USER0=sanityusr:x:500:500::/home/lustreuser:/bin/bash
was USER1=sanityusr1:x:501:501::/home/sanityusr1:/bin/bash
now USER0=sanityusr=500:500, USER1=sanityusr1=501:501
=== sanity-sec: start setup 16:32:59 (1789677179) ===
oleg446-client.virtnet: executing check_config_client /mnt/lustre
oleg446-client.virtnet: Checking config lustre mounted on /mnt/lustre
Checking servers environments
Checking clients oleg446-client.virtnet environments
Using TIMEOUT=20
osc.lustre-OST0000-osc-ffff88fe9a1f0800.idle_timeout=debug
osc.lustre-OST0001-osc-ffff88fe9a1f0800.idle_timeout=debug
disable quota as required
oleg446-server: oleg446-server.virtnet: executing set_default_debug vfstrace rpctrace dlmtrace neterror ha config ioctl super lfsck all
=== sanity-sec: finish setup 16:33:40 (1789677220) ===
oleg446-server: Warning: it is not recommended to have a squash value outside of the offset range [ 0, -3 ] as it will not be mapped properly.
On MGS 192.168.204.146, default.squash_uid = nodemap.default.squash_uid=65534
oleg446-server: Warning: it is not recommended to have a squash value outside of the offset range [ 0, -3 ] as it will not be mapped properly.
On MGS 192.168.204.146, default.squash_gid = nodemap.default.squash_gid=65534
oleg446-server: Warning: it is not recommended to have a squash value outside of the offset range [ 0, -3 ] as it will not be mapped properly.
On MGS 192.168.204.146, default.squash_projid = nodemap.default.squash_projid=65534

== sanity-sec test 86a: nodemap version policy blocks or allows client versions ========================================================== 16:34:01 (1789677241)
192.168.204.146@tcp:/lustre /mnt/lustre lustre rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose 0 0
Stopping client oleg446-client.virtnet /mnt/lustre (opts:)
oleg446-server: error: nodemap 'c0' does not exist
oleg446-server: nodemap_del: Invalid argument
pdsh@oleg446-client: oleg446-server: ssh exited with exit code 1
On MGS 192.168.204.146, active = nodemap.active=1
oleg446-server: error: invalid ioctl: 000ce06a errno: 22: Invalid argument
oleg446-server: error: nodemap_set_version_policy: cannot set version policy 'warn:*' on nodemap 'c0': Invalid argument
pdsh@oleg446-client: oleg446-server: ssh exited with exit code 22
oleg446-server: nodemap_set_version_policy: missing glob
pdsh@oleg446-client: oleg446-server: ssh exited with exit code 4
define which client versions may connect from a nodemap
usage: nodemap_set_version_policy --name NODEMAP_NAME --policy {allow|block} [--glob VERSION_GLOB]
On MGS 192.168.204.146, c0.version_policy = nodemap.c0.version_policy=block:0.0.*
Starting client oleg446-client.virtnet:  -o user_xattr,flock 192.168.204.146@tcp:/lustre /mnt/lustre
Mount client oleg446-client.virtnet: mount -t lustre -o user_xattr,flock 192.168.204.146@tcp:/lustre /mnt/lustre
Started clients oleg446-client.virtnet: 
192.168.204.146@tcp:/lustre on /mnt/lustre type lustre (rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose)
192.168.204.146@tcp:/lustre /mnt/lustre lustre rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose 0 0
Stopping client oleg446-client.virtnet /mnt/lustre (opts:)
On MGS 192.168.204.146, c0.version_policy = nodemap.c0.version_policy=block:2.17.*
Starting client oleg446-client.virtnet:  -o user_xattr,flock 192.168.204.146@tcp:/lustre /mnt/lustre
mount.lustre: mount 192.168.204.146@tcp:/lustre at /mnt/lustre failed: Permission denied
Mount client oleg446-client.virtnet: mount -t lustre -o user_xattr,flock 192.168.204.146@tcp:/lustre /mnt/lustre
On MGS 192.168.204.146, c0.version_policy = nodemap.c0.version_policy=allow:2.17.*
Starting client oleg446-client.virtnet:  -o user_xattr,flock 192.168.204.146@tcp:/lustre /mnt/lustre
Mount client oleg446-client.virtnet: mount -t lustre -o user_xattr,flock 192.168.204.146@tcp:/lustre /mnt/lustre
Started clients oleg446-client.virtnet: 
192.168.204.146@tcp:/lustre on /mnt/lustre type lustre (rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose)
192.168.204.146@tcp:/lustre /mnt/lustre lustre rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose 0 0
Stopping client oleg446-client.virtnet /mnt/lustre (opts:)
On MGS 192.168.204.146, c0.version_policy = nodemap.c0.version_policy=allow:0.0.*
Starting client oleg446-client.virtnet:  -o user_xattr,flock 192.168.204.146@tcp:/lustre /mnt/lustre
mount.lustre: mount 192.168.204.146@tcp:/lustre at /mnt/lustre failed: Permission denied
Mount client oleg446-client.virtnet: mount -t lustre -o user_xattr,flock 192.168.204.146@tcp:/lustre /mnt/lustre
On MGS 192.168.204.146, c0.version_policy = nodemap.c0.version_policy=allow:*
Starting client oleg446-client.virtnet:  -o user_xattr,flock 192.168.204.146@tcp:/lustre /mnt/lustre
Mount client oleg446-client.virtnet: mount -t lustre -o user_xattr,flock 192.168.204.146@tcp:/lustre /mnt/lustre
Started clients oleg446-client.virtnet: 
192.168.204.146@tcp:/lustre on /mnt/lustre type lustre (rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose)
On MGS 192.168.204.146, active = nodemap.active=0
PASS 86a (76s)

== sanity-sec test 86b: version policy privilege on dynamic nodemaps ========================================================== 16:35:16 (1789677316)
On MGS 192.168.204.146, nm_test86b.version_policy = nodemap.nm_test86b.version_policy=block:2.15.*
oleg446-server: error: invalid ioctl: 000ce06a errno: 1: Operation not permitted
oleg446-server: error: nodemap_set_version_policy: cannot set version policy 'allow:*' on nodemap 'nm_test86b_dyn': Operation not permitted
pdsh@oleg446-client: oleg446-server: ssh exited with exit code 1
On MGS 192.168.204.146, nm_test86b.child_raise_privileges = nodemap.nm_test86b.child_raise_privileges=version_policy
On MGS 192.168.204.146, nm_test86b.version_policy = nodemap.nm_test86b.version_policy=allow:*
PASS 86b (40s)
cleanup: ======================================================
running as uid/gid/euid/egid 500/500/500/500, groups: 500
 [ls] [/mnt/lustre]
running as uid/gid/euid/egid 501/501/501/501, groups: 501
 [ls] [/mnt/lustre]
== sanity-sec test complete, duration 201 sec ============ 16:35:58 (1789677358)
=== sanity-sec: start cleanup 16:36:00 (1789677360) ===
=== sanity-sec: finish cleanup 16:36:04 (1789677364) ===