-----============= acceptance-small: sanity-sec ============----- Thu Sep 17 16:37:22 EDT 2026
MGS_OS_ID_LIKE=rhel centos fedora rocky
MGS_OS_VERSION_ID=8.10
MGS_OS_ID=rocky
MGS_OS_VERSION_CODE=134873088
MDS1_OS_VERSION_ID=8.10
MDS1_OS_VERSION_CODE=134873088
MDS1_OS_ID_LIKE=rhel centos fedora rocky
MDS1_OS_ID=rocky
OST1_OS_VERSION_CODE=134873088
OST1_OS_ID_LIKE=rhel centos fedora rocky
OST1_OS_VERSION_ID=8.10
OST1_OS_ID=rocky
CLIENT_OS_ID=rocky
CLIENT_OS_VERSION_CODE=134873088
CLIENT_OS_VERSION_ID=8.10
CLIENT_OS_ID_LIKE=rhel centos fedora rocky
client=34683431 MDS=34683431 OSS=34683431
oleg625-server: /home/green/git/lustre-release/lustre/tests/except/sanity-sec.ex
- see CLIENT_VERSION >= v2_16_57-13-g40cd140b85 (34683431 >= 34617613) for LU-18357, go 27a 27b
excepting tests: 
skipping tests SLOW=no: 26
was USER0=sanityusr:x:500:500::/home/lustreuser:/bin/bash
was USER1=sanityusr1:x:501:501::/home/sanityusr1:/bin/bash
now USER0=sanityusr=500:500, USER1=sanityusr1=501:501
=== sanity-sec: start setup 16:37:41 (1789677461) ===
oleg625-client.virtnet: executing check_config_client /mnt/lustre
oleg625-client.virtnet: Checking config lustre mounted on /mnt/lustre
Checking servers environments
Checking clients oleg625-client.virtnet environments
Using TIMEOUT=20
osc.lustre-OST0000-osc-ffff8ed3c4a1e800.idle_timeout=debug
osc.lustre-OST0001-osc-ffff8ed3c4a1e800.idle_timeout=debug
disable quota as required
oleg625-server: oleg625-server.virtnet: executing set_default_debug vfstrace rpctrace dlmtrace neterror ha config ioctl super lfsck all
osd-ldiskfs.track_declares_assert=1
=== sanity-sec: finish setup 16:38:17 (1789677497) ===
oleg625-server: Warning: it is not recommended to have a squash value outside of the offset range [ 0, -3 ] as it will not be mapped properly.
On MGS 192.168.206.125, default.squash_uid = nodemap.default.squash_uid=65534
oleg625-server: Warning: it is not recommended to have a squash value outside of the offset range [ 0, -3 ] as it will not be mapped properly.
On MGS 192.168.206.125, default.squash_gid = nodemap.default.squash_gid=65534
oleg625-server: Warning: it is not recommended to have a squash value outside of the offset range [ 0, -3 ] as it will not be mapped properly.
On MGS 192.168.206.125, default.squash_projid = nodemap.default.squash_projid=65534

== sanity-sec test 86a: nodemap version policy blocks or allows client versions ========================================================== 16:38:34 (1789677514)
192.168.206.125@tcp:/lustre /mnt/lustre lustre rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose 0 0
Stopping client oleg625-client.virtnet /mnt/lustre (opts:)
oleg625-server: error: nodemap 'c0' does not exist
oleg625-server: nodemap_del: Invalid argument
pdsh@oleg625-client: oleg625-server: ssh exited with exit code 1
On MGS 192.168.206.125, active = nodemap.active=1
oleg625-server: error: invalid ioctl: 000ce06a errno: 22: Invalid argument
oleg625-server: error: nodemap_set_version_policy: cannot set version policy 'warn:*' on nodemap 'c0': Invalid argument
pdsh@oleg625-client: oleg625-server: ssh exited with exit code 22
oleg625-server: nodemap_set_version_policy: missing glob
pdsh@oleg625-client: oleg625-server: ssh exited with exit code 4
define which client versions may connect from a nodemap
usage: nodemap_set_version_policy --name NODEMAP_NAME --policy {allow|block} [--glob VERSION_GLOB]
On MGS 192.168.206.125, c0.version_policy = nodemap.c0.version_policy=block:0.0.*
Starting client oleg625-client.virtnet:  -o user_xattr,flock 192.168.206.125@tcp:/lustre /mnt/lustre
Mount client oleg625-client.virtnet: mount -t lustre -o user_xattr,flock 192.168.206.125@tcp:/lustre /mnt/lustre
Started clients oleg625-client.virtnet: 
192.168.206.125@tcp:/lustre on /mnt/lustre type lustre (rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose)
192.168.206.125@tcp:/lustre /mnt/lustre lustre rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose 0 0
Stopping client oleg625-client.virtnet /mnt/lustre (opts:)
On MGS 192.168.206.125, c0.version_policy = nodemap.c0.version_policy=block:2.17.*
Starting client oleg625-client.virtnet:  -o user_xattr,flock 192.168.206.125@tcp:/lustre /mnt/lustre
mount.lustre: mount 192.168.206.125@tcp:/lustre at /mnt/lustre failed: Permission denied
Mount client oleg625-client.virtnet: mount -t lustre -o user_xattr,flock 192.168.206.125@tcp:/lustre /mnt/lustre
On MGS 192.168.206.125, c0.version_policy = nodemap.c0.version_policy=allow:2.17.*
Starting client oleg625-client.virtnet:  -o user_xattr,flock 192.168.206.125@tcp:/lustre /mnt/lustre
Mount client oleg625-client.virtnet: mount -t lustre -o user_xattr,flock 192.168.206.125@tcp:/lustre /mnt/lustre
Started clients oleg625-client.virtnet: 
192.168.206.125@tcp:/lustre on /mnt/lustre type lustre (rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose)
192.168.206.125@tcp:/lustre /mnt/lustre lustre rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose 0 0
Stopping client oleg625-client.virtnet /mnt/lustre (opts:)
On MGS 192.168.206.125, c0.version_policy = nodemap.c0.version_policy=allow:0.0.*
Starting client oleg625-client.virtnet:  -o user_xattr,flock 192.168.206.125@tcp:/lustre /mnt/lustre
mount.lustre: mount 192.168.206.125@tcp:/lustre at /mnt/lustre failed: Permission denied
Mount client oleg625-client.virtnet: mount -t lustre -o user_xattr,flock 192.168.206.125@tcp:/lustre /mnt/lustre
On MGS 192.168.206.125, c0.version_policy = nodemap.c0.version_policy=allow:*
Starting client oleg625-client.virtnet:  -o user_xattr,flock 192.168.206.125@tcp:/lustre /mnt/lustre
Mount client oleg625-client.virtnet: mount -t lustre -o user_xattr,flock 192.168.206.125@tcp:/lustre /mnt/lustre
Started clients oleg625-client.virtnet: 
192.168.206.125@tcp:/lustre on /mnt/lustre type lustre (rw,flock,checksum,encrypt,lazystatfs,lruresize,nolock,statfs_project,nosync_on_close,nouser_fid2path,user_xattr,verbose)
On MGS 192.168.206.125, active = nodemap.active=0
PASS 86a (64s)

== sanity-sec test 86b: version policy privilege on dynamic nodemaps ========================================================== 16:39:38 (1789677578)
On MGS 192.168.206.125, nm_test86b.version_policy = nodemap.nm_test86b.version_policy=block:2.15.*
oleg625-server: error: invalid ioctl: 000ce06a errno: 1: Operation not permitted
oleg625-server: error: nodemap_set_version_policy: cannot set version policy 'allow:*' on nodemap 'nm_test86b_dyn': Operation not permitted
pdsh@oleg625-client: oleg625-server: ssh exited with exit code 1
On MGS 192.168.206.125, nm_test86b.child_raise_privileges = nodemap.nm_test86b.child_raise_privileges=version_policy
On MGS 192.168.206.125, nm_test86b.version_policy = nodemap.nm_test86b.version_policy=allow:*
PASS 86b (34s)
cleanup: ======================================================
running as uid/gid/euid/egid 500/500/500/500, groups: 500
 [ls] [/mnt/lustre]
running as uid/gid/euid/egid 501/501/501/501, groups: 501
 [ls] [/mnt/lustre]
== sanity-sec test complete, duration 170 sec ============ 16:40:13 (1789677613)
=== sanity-sec: start cleanup 16:40:15 (1789677615) ===
=== sanity-sec: finish cleanup 16:40:20 (1789677620) ===