buggLite Middleware - Bugs: bug #49324, gatekeeper not sending hostname to...

 
 
Show feedback again

You are not allowed to post comments on this tracker with your current authentication level.

bug #49324: gatekeeper not sending hostname to syslog

Submitted by:  Laura del Cano <ldelcano>
Submitted on:  2009-04-17 11:23  
 
Status: In progressOpen/Closed: Open
Category: VDTSeverity: 5 - Major
Baseline Release (where bug has been observed): gLite 3.1Release (where bug fix will be available: EMI 1, EMI 2, EMI 3, All): 
OS: SL 4Architecture: x86_64
Bug detection area: ProductionAssigned to: Andreas Unterkircher <unterkir>
Privacy: PublicPriority: High
Associated Test: None
GGUS reference URL: 
Component tag(s): 
Subsystem tag(s): 
Build environment: None

(Jump to the original submission Jump to the original submission)

2009-11-23 14:58, comment #10:

Also being considered as mirror bug to GSVG issue bug #59215.
Low risk with TD 23rd May 2010.

Linda Cornwall <cornwall>
Project Member
2009-11-19 14:14, comment #9:

This has been passed to Alain Roy of VDT in order to get a
rebuild of the offending globus part(s).

John White <jwhite>
Project Administrator
2009-11-18 13:24, comment #8:

Adding Linda in CC - this clearly has some security implications.

Romain Wartel <rwartel>
2009-11-08 08:43, comment #7:

Please track this bug. I've upped the priority.

It's casuing problems for the CERN syslog tracker which is a core part of the CERN Security Team's infrastructue.

Luis Fernando Muñoz Mejías is the contact here.

mccance <mccance>
2009-08-05 15:51, comment #6:

BTW, this is not just an "enhancement", but a real bug: it prevents tracing events in any central location.

Luis Fernando Muñoz Mejías <mejias>
2009-08-05 15:30, comment #5:

Hi, there.

Essentially, the problem here is that the GRAM Gatekeeper insists in telling syslog that its application name (or syslogtag, naming depends on the syslog daemon) is "GRAM gatekeeper", with whitespaces.

This is not allowed by syslog practices and standard draft (RFC3164 and 5424 respectively), and thus syslog daemons are allowed to mess things up. The GRAM gatekeeper code must change the ident argument to something without spaces when calling to openlog.

According to the syslog standard draft, this field has the following form:

APP-NAME = NILVALUE / 1*48PRINTUSASCII
[...]
PRINTUSASCII = %d33-126

Whitespace is %d32.

Cheers.

Luis Fernando Muñoz Mejías <mejias>
2009-04-20 09:36, comment #4:

Hi Andrew,
yes, we are running with mixed rpms:

[root@gridce01 ~]# rpm -qa|grep kernel
kernel-2.6.24.3-amd.2.x86_64
kernel-utils-2.4-13.1.105.x86_64

[root@gridce01 ~]# rpm -qa | grep vdt_globus
vdt_globus_rm_essentials-VDT1.6.1x86_rhas_4-7.i386
vdt_globus_jobmanager_pbs-VDT1.6.1x86_rhas_4_LCG-1.i386
vdt_globus_essentials-VDT1.6.1x86_rhas_4-7.i386
vdt_globus_jobmanager_lsf-VDT1.6.1x86_rhas_4_LCG-1.i386
vdt_globus_jobmanager_condor-VDT1.6.1x86_rhas_4_LCG-1.i386
vdt_globus_jobmanager_common-VDT1.6.1x86_rhas_4_LCG-3.i386
vdt_globus_data_server-VDT1.6.1x86_rhas_4-7.i386
vdt_globus_rm_server-VDT1.6.1x86_rhas_4_LCG-1.i386

P.S. The bug is not critical, I realized cause we send syslog messages to a relational database and these messages do not make it cause the server is not properly filled in.

Laura del Cano <ldelcano>
2009-04-20 08:37, comment #3:

Hi Laura, I see you commented that $ARCH is x86_64 - The CE isn't released for x86_64. Are you running with mixed RPMs (some i386, some x96_64)? Can you also send me the version of gatekeeper installed (rpm -qa | grep vdt_globus)

Many thanks

Andrew

[nb - as we basically rebundle the VDT releases for gLite, this probably will have to be pushed upstream]

Andrew Elwell <aelwell>
Project Administrator
2009-04-17 11:46, comment #2:

Sorry, architecture is x86_64.

Laura del Cano <ldelcano>
2009-04-17 11:38, comment #1:

Hi Andrew,

I think this one is for you, could you please have a look? Thanks a lot!

Maria Alandes Pradillo <malandes>
Project Administrator
2009-04-17 11:23, original submission:

I can see on /var/log/messages the following entries related to the gatekeeper.
Feb 6 14:23:26 GRAM gatekeeper[14288]: /opt/globus/sbin/globus-gatekeeper pid=14288 starting at Fri Feb 6 14:23:26 2009
Feb 6 14:23:26 GRAM gatekeeper[14288]: GRAM contact: ce1jtest.ft.uam.es:2119:/DC=es/DC=irisgrid/O=uam/CN=ce1jtest.ft.uam.es

According to syslog specs, second field shouldn't contain the hostname?

Laura del Cano <ldelcano>

 

No files currently attached

 

Depends on the following items: None found

Items that depend on this one: None found

 

Carbon-Copy List
  • -unavailable- added by okeeble (Updated the item)
  • -unavailable- added by cornwall (Posted a comment)
  • -unavailable- added by sburke
  • -unavailable- added by jwhite (Updated the item)
  • -unavailable- added by rwartel (Posted a comment)
  • -unavailable- added by rwartel
  • -unavailable- added by unterkir (Updated the item)
  • -unavailable- added by mccance
  • -unavailable- added by mccance (Posted a comment)
  • -unavailable- added by mejias (Posted a comment)
  • -unavailable- added by aelwell (Updated the item)
  • -unavailable- added by malandes (Posted a comment)
  • -unavailable- added by ldelcano (Submitted the item)
  •  

     

     

    Follow 15 latest changes.

    Date Changed By Updated Field Previous Value => Replaced By
    2010-03-19 09:22okeeblePriorityTracked (please reclassify)=>High
    2009-11-19 16:58sburkeCarbon-Copy-=>Added sburke
    2009-11-19 14:13jwhiteStatusNone=>In progress
    2009-11-18 13:24rwartelCarbon-Copy-=>Added -unavailable-
    2009-11-18 13:21unterkirCategorylcg-CE=>VDT
      Assigned to-Automatic update due to transitions settings-=>unterkir
    2009-11-08 08:45mccanceCarbon-Copy-=>Added rwartel
    2009-11-08 08:44mccanceCarbon-CopyRemoved romain.wartel"]=>-
    2009-11-08 08:44mccanceCarbon-Copy-=>Added romain.wartel"]
    2009-11-08 08:43mccanceSeverity3 - Minor=>5 - Major
      PriorityEnhancement (please reclassify)=>Tracked (please reclassify)
    2009-04-20 08:29aelwellArchitecturei386=>x86_64
    2009-04-17 11:38malandesCategorygLite Middleware - General=>lcg-CE
      Assigned tomalandes=>aelwell
    2009-04-17 11:23ldelcanoAssigned to-Automatic update due to transitions settings-=>malandes
    Show feedback again

    Back to the top


    Powered by Savane SVN (toward 3.1)