nspcc-dev / nspcc-dev/neofs-node

Attempt to replicate object in case of a policy with only one copy and ACL error (node in the container)

Open
#1,184 6 comments 0 reactions 0 assignees View on GitHub

Nobody has claimed this yet.

bug I4 neofs-storage S3 U3
Dominant language
Go
Stars
38
Forks
51
Avg merge
1d 20h
Merged PRs (30d)
38

Description

Version: v0.27.5
Node: karen - st01.testnet.fs.neo.org:8080

Log:

фев 16 07:33:37 karen neofs-storage[735]: 2022-02-16T07:33:37.951Z        error        replicator/process.go:82        could not replicate object        {"component": "Object Replicator", "node": "0296416a8da7e2d144688d3f1f7af9321b88d12b0497c9b630d92a0f483610f8d5", "object": "5HmHKNKsPgyGnp37yCNVaVm7k9o3jvVeAbXXoJj6RHax/GHKEnSzYS2BRgYVvUWiDzRxsvVUYdmPWii27jEFaE5Fk", "error": "(*putsvc.RemoteSender) could not send object: (*putsvc.remoteTarget) could not put object to [/dns4/st04.testnet.fs.neo.org/tcp/8080]: status: code = 1024 message = (*response.ClientMessageStreamer) could not send the request: access to operation PUT is denied by basic ACL check"}
фев 16 07:33:37 karen neofs-storage[735]: 2022-02-16T07:33:37.951Z        error        replicator/process.go:82        could not replicate object        {"component": "Object Replicator", "node": "0296416a8da7e2d144688d3f1f7af9321b88d12b0497c9b630d92a0f483610f8d5", "object": "5HmHKNKsPgyGnp37yCNVaVm7k9o3jvVeAbXXoJj6RHax/FWvMsrjt8KA6fsxYLe9kVXutuRvp5AoDo7uMTAgR9359", "error": "(*putsvc.RemoteSender) could not send object: (*putsvc.remoteTarget) could not put object to [/dns4/st04.testnet.fs.neo.org/tcp/8080]: status: code = 1024 message = (*response.ClientMessageStreamer) could not send the request: access to operation PUT is denied by basic ACL check"}
фев 16 07:33:38 karen neofs-storage[735]: 2022-02-16T07:33:38.016Z        error        replicator/process.go:82        could not replicate object        {"component": "Object Replicator", "node": "0296416a8da7e2d144688d3f1f7af9321b88d12b0497c9b630d92a0f483610f8d5", "object": "5HmHKNKsPgyGnp37yCNVaVm7k9o3jvVeAbXXoJj6RHax/VsgDnWmpFww6XDP2A62YtKnf9ex7FDDFJshc6aX1G3F", "error": "(*putsvc.RemoteSender) could not send object: (*putsvc.remoteTarget) could not put object to [/dns4/st04.testnet.fs.neo.org/tcp/8080]: status: code = 1024 message = (*response.ClientMessageStreamer) could not send the request: access to operation PUT is denied by basic ACL check"}

Container:

container ID: 5HmHKNKsPgyGnp37yCNVaVm7k9o3jvVeAbXXoJj6RHax
version: 2.11
owner ID: NQgjuLbEzWYqzs1krT7YrDtSDdQU8JFdPS
basic ACL: 3078316338633863 (private)
attribute: Timestamp=1643257324 (2022-01-27 07:22:04 +0300 MSK)
nonce: ace62fa5-31d2-4f6b-af18-b7d3a9460213
placement policy:
REP 1 IN X
CBF 1
SELECT 1 FROM F AS X
FILTER UN-LOCODE EQ DE FKS AS F

Node location st01.testnet.fs.neo.org:8080: UN-LOCODE:DE FKS

Contributor guide

Open the contributing guide

First steps

  1. Read the whole issue, then the project's contributing guide.
  2. Comment on the issue to say you are picking it up — it saves two people doing the same work.
  3. Fork the repository and make your change on a branch.
  4. Open a pull request that references the issue number.

Research direction

Start at replicator/process.go:82 and trace the object replication path for the reported REP 1 policy and private basic ACL. Reproduce the ACL-denied PUT against the node described in the issue, then verify that replication handles this case without the reported error.

Written by the indexing model from the issue text.

Assessment

Tech stack
go
Domain
distributed-systems
Issue type
Bug
Difficulty
4/5
Estimated time
3-5 days
Activity status
Stale
Clarity
Needs clarification
Newbie friendliness
35/100

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.