<html><body><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div data-marker="__QUOTED_TEXT__"><div style="font-family: arial, helvetica, sans-serif; font-size: 12pt; color: #000000"><div> <span class="tlid-translation translation" lang="en">Hello,<br><br>I had a problem on two proxmox / linstor / drbd clusters on LVM Thinprovisioning storage.<br>I rebuilt the thinprovisioning storage to increase the metadata space, initially undersized.<br>Everything went well, but when I wanted to move the VMs from the temporary storage to the drbd storage, I could not. Same problem when creating a VM or creating a linstor resource in manual.<br><br>To recover the functional access to the storage, I had to change the global security level from "MAC" to "NO_SECURITY" ( setSecLvl secLvl (NO_SECURITY) in Linstor debug mode ).<br><br>My installations are nothing special, the "MAC" mode seems to be the default one during the first installation. I do not understand why this value needs to be changed.<br><br>I did not find any information about the different Linstor security modes; where can I find it?<br><br>If I go back to "MAC" mode again, I reproduce the problem.<br><br>Thank you for your lighting ...</span></div><div><span class="tlid-translation translation" lang="en"><br data-mce-bogus="1"></span></div><div><span class="tlid-translation translation" lang="en">Greb,<br><br>Further informations :</span> </div><div><span class="tlid-translation translation" lang="en"><br></span></div><div><span class="tlid-translation translation" lang="en"> pve-manager/5.4-13/aee6f0ec (running kernel: 4.15.18-20-pve)<br> linstor-client 1.0.1-1 <br> linstor-common 1.0.1-1 <br> linstor-controller 1.0.1-1 <br> linstor-proxmox 4.0.0-1 <br> linstor-satellite 1.0.1-1 <br> python-linstor 1.0.0-1 <br> drbd-dkms 9.0.19-1 <br> drbd-utils 9.10.0-1 <br><br>Proxmox GUI<br><br>TASK ERROR: unable to create VM 999 - error with cfs lock 'storage-drbdstorage': Could not create resource definition vm-999-disk-1, because: [{"ret_code":-4611686018406940253,"message":"Identity 'PUBLIC' using role: 'PUBLIC' is not authorized to access resource group 'DfltRscGrp'.","cause":"Access of type 'VIEW' not allowed by the access control list","details":"Resource definition: vm-999-disk-1","error_report_ids":["5D53C454-00000-000001"],"obj_refs":{"RscDfn":"vm-999-disk-1"}}] at /usr/share/perl5/PVE/Storage/Custom/LINSTORPlugin.pm line 253. ...<br><br>linstor rd create first<br><br>ERROR:<br>Description:<br> Identity 'PUBLIC' using role: 'PUBLIC' is not authorized to access resource group 'DfltRscGrp'.<br>Cause:<br> Access of type 'VIEW' not allowed by the access control list<br>Details:<br> Resource definition: first<br>Show reports:<br> linstor error-reports show 5D52CC74-00000-000001</span></div><div><span class="tlid-translation translation" lang="en"><br>ERROR REPORT 5D52CC74-00000-000001<br><br>============================================================<br><br>Application: LINBITĀ® LINSTOR<br>Module: Controller<br>Version: 1.0.1<br>Build ID: 98a9905de43631b745c7c0741c2ef8f577513b23<br>Build time: 2019-08-09T06:50:31+00:00<br>Error time: 2019-08-13 17:42:26<br>Node: pve1<br>Peer: RestClient(127.0.0.1; 'PythonLinstor/1.0.0 (API1.0.4)')<br><br>============================================================<br><br>Reported error:<br>===============<br><br>Description:<br> Access to the protected object was denied<br>Cause:<br> The access control list for the protected object does not allow access of type VIEW by role PUBLIC<br>Correction:<br> An entry that allows access must be added by an authorized role<br><br>Category: LinStorException<br>Class name: AccessDeniedException<br>Class canonical name: com.linbit.linstor.security.AccessDeniedException<br>Generated at: Method 'requireAccess', Source file 'AccessControlList.java', Line #69<br><br>Error message: Access of type 'VIEW' not allowed by the access control list<br><br>Error context:<br> Identity 'PUBLIC' using role: 'PUBLIC' is not authorized to access resource group 'DfltRscGrp'.<br><br>Call backtrace:<br><br> Method Native Class:Line number<br> requireAccess N com.linbit.linstor.security.AccessControlList:69<br> requireAccess N com.linbit.linstor.security.ObjectProtection:174<br> get N com.linbit.linstor.core.repository.ResourceGroupProtectionRepository:62<br> loadResourceGroup N com.linbit.linstor.core.apicallhandler.controller.CtrlApiDataLoader:577<br> loadResourceGroup N com.linbit.linstor.core.apicallhandler.controller.CtrlApiDataLoader:544<br> createRscDfn N com.linbit.linstor.core.apicallhandler.controller.CtrlRscDfnApiCallHandler:487<br> createResourceDefinition N com.linbit.linstor.core.apicallhandler.controller.CtrlRscDfnApiCallHandler:167<br> createResourceDefinition N com.linbit.linstor.core.apicallhandler.controller.CtrlApiCallHandler:215<br> lambda$createResourceDefinition$3 N com.linbit.linstor.api.rest.v1.ResourceDefinitions:120<br> doInScope N com.linbit.linstor.api.rest.v1.RequestHelper:226<br> createResourceDefinition N com.linbit.linstor.api.rest.v1.ResourceDefinitions:103<br> invoke0 Y sun.reflect.NativeMethodAccessorImpl:unknown<br> invoke N sun.reflect.NativeMethodAccessorImpl:62<br> invoke N sun.reflect.DelegatingMethodAccessorImpl:43<br> invoke N java.lang.reflect.Method:498<br> lambda$static$0 N org.glassfish.jersey.server.model.internal.ResourceMethodInvocationHandlerFactory:52<br> run N org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher$1:124<br> invoke N org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher:167<br> doDispatch N org.glassfish.jersey.server.model.internal.JavaResourceMethodDispatcherProvider$ResponseOutInvoker:176<br> dispatch N org.glassfish.jersey.server.model.internal.AbstractJavaResourceMethodDispatcher:79<br> invoke N org.glassfish.jersey.server.model.ResourceMethodInvoker:469<br> apply N org.glassfish.jersey.server.model.ResourceMethodInvoker:391<br> apply N org.glassfish.jersey.server.model.ResourceMethodInvoker:80<br> run N org.glassfish.jersey.server.ServerRuntime$1:253<br> call N org.glassfish.jersey.internal.Errors$1:248<br> call N org.glassfish.jersey.internal.Errors$1:244<br> process N org.glassfish.jersey.internal.Errors:292<br> process N org.glassfish.jersey.internal.Errors:274<br> process N org.glassfish.jersey.internal.Errors:244<br> runInScope N org.glassfish.jersey.process.internal.RequestScope:265<br> process N org.glassfish.jersey.server.ServerRuntime:232<br> handle N org.glassfish.jersey.server.ApplicationHandler:680<br> service N org.glassfish.jersey.grizzly2.httpserver.GrizzlyHttpContainer:353<br> run N org.glassfish.grizzly.http.server.HttpHandler$1:200<br> doWork N org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker:569<br> run N org.glassfish.grizzly.threadpool.AbstractThreadPool$Worker:549<br> run N java.lang.Thread:748<br><br>END OF ERROR REPORT.<br><br></span></div></div></div></div></body></html>