Ineiev wrote:
> Our Arabic team leader can't commit to www repository,
> it looks like the error is persistent ("couldn't open lock file...
> Permission denied");
cvs [commit aborted]: could not open lock file
`/web/www/www/philosophy/po/,not-ipr.ar.po,': Permission denied
> curiously, I was able to commit via his account when I added my ssh
> key to account conf,
This information would seem to say that it should work for him too.
Since you are logging in as him it should be exactly the same.
> and he was able to commit to GNUN web pages:
This might not be as interesting. Since he is a member of several
groups and gnun is a different group.
id ka2in
uid=132709(ka2in) gid=1003(svusers)
groups=1003(svusers),1018(www),2312(trans-coord),5693(www-ar),7081(gnun)
Being a member of both groups there should be access to both.
> http://savannah.gnu.org/bugs/?47633
>
> Could anybody suggest what it might be?
Curiously I see that file ACLs are in use on the www side of things.
vcs:/web/www# ls -ld /web/www/www
drwxrwsr-x+ 88 root www 12288 Apr 25 05:59 /web/www/www
vcs:/web/www# ls -l /web/www/www/philosophy/po/not-ipr.ar.po,v
-r--r--r--+ 1 gnun www 136359 Apr 20 2015
/web/www/www/philosophy/po/not-ipr.ar.po,v
The "+" in the above indicates access control lists are active. Sure
enough they are active on that partition.
vcs:/web/www# mount | grep acl
/dev/xvda2 on / type ext4 (rw,noatime,errors=remount-ro,acl,nobarrier)
vcs:/web/www# getfacl /web/www/www/philosophy/po
getfacl: Removing leading '/' from absolute path names
# file: web/www/www/philosophy/po
# owner: yavor
# group: www
# flags: -s-
user::rwx
group::rwx
group:www:rwx
mask::rwx
other::r-x
default:user::rwx
default:group::rwx
default:group:www:rwx
default:mask::rwx
default:other::r-x
vcs:/web/www# getfacl /web/www/www/philosophy/po/not-ipr.ar.po,v
getfacl: Removing leading '/' from absolute path names
# file: web/www/www/philosophy/po/not-ipr.ar.po,v
# owner: gnun
# group: www
user::r--
group::rwx #effective:r--
group:www:rwx #effective:r--
mask::r--
other::r--
I am not familiar with file ACLs other than what I can deduce from the
above. But I fear they must be involved somehow. But I don't know.
But otherwise I don't know why there would be a problem getting a
permission denied error on creating that file.
cvs [commit aborted]: could not open lock file
`/web/www/www/philosophy/po/,not-ipr.ar.po,': Permission denied
vcs:/web/www# ll -d /web/www/www/philosophy/po
drwxrwsr-x+ 3 yavor www 143360 Apr 23 18:30 /web/www/www/philosophy/po
vcs:/web/www# id ka2in
uid=132709(ka2in) gid=1003(svusers)
groups=1003(svusers),1018(www),2312(trans-coord),5693(www-ar),7081(gnun)
Because ka2in is in the www group and the www group has write
permission to the directory.
Sorry but that is what I know and don't know at this moment.
Bob
