Re: [savannah-help-public] problems with committing web pages

[Bob Proulx]

Ineiev wrote:
> Our Arabic team leader can't commit to www repository,
> it looks like the error is persistent ("couldn't open lock file...
> Permission denied");

  cvs [commit aborted]: could not open lock file 
`/web/www/www/philosophy/po/,not-ipr.ar.po,': Permission denied 

> curiously, I was able to commit via his account when I added my ssh
> key to account conf,

This information would seem to say that it should work for him too.
Since you are logging in as him it should be exactly the same.

> and he was able to commit to GNUN web pages:

This might not be as interesting.  Since he is a member of several
groups and gnun is a different group.

  id ka2in
    uid=132709(ka2in) gid=1003(svusers) 
groups=1003(svusers),1018(www),2312(trans-coord),5693(www-ar),7081(gnun)

Being a member of both groups there should be access to both.

> http://savannah.gnu.org/bugs/?47633
> 
> Could anybody suggest what it might be?

Curiously I see that file ACLs are in use on the www side of things.

  vcs:/web/www# ls -ld /web/www/www
  drwxrwsr-x+ 88 root www 12288 Apr 25 05:59 /web/www/www
  vcs:/web/www# ls -l /web/www/www/philosophy/po/not-ipr.ar.po,v    
  -r--r--r--+ 1 gnun www 136359 Apr 20  2015 
/web/www/www/philosophy/po/not-ipr.ar.po,v

The "+" in the above indicates access control lists are active.  Sure
enough they are active on that partition.

  vcs:/web/www# mount | grep acl
  /dev/xvda2 on / type ext4 (rw,noatime,errors=remount-ro,acl,nobarrier)

  vcs:/web/www# getfacl /web/www/www/philosophy/po
  getfacl: Removing leading '/' from absolute path names
  # file: web/www/www/philosophy/po
  # owner: yavor
  # group: www
  # flags: -s-
  user::rwx
  group::rwx
  group:www:rwx
  mask::rwx
  other::r-x
  default:user::rwx
  default:group::rwx
  default:group:www:rwx
  default:mask::rwx
  default:other::r-x

  vcs:/web/www# getfacl /web/www/www/philosophy/po/not-ipr.ar.po,v
  getfacl: Removing leading '/' from absolute path names
  # file: web/www/www/philosophy/po/not-ipr.ar.po,v
  # owner: gnun
  # group: www
  user::r--
  group::rwx                      #effective:r--
  group:www:rwx                   #effective:r--
  mask::r--
  other::r--

I am not familiar with file ACLs other than what I can deduce from the
above.  But I fear they must be involved somehow.  But I don't know.
But otherwise I don't know why there would be a problem getting a
permission denied error on creating that file.

  cvs [commit aborted]: could not open lock file 
`/web/www/www/philosophy/po/,not-ipr.ar.po,': Permission denied 

  vcs:/web/www# ll -d /web/www/www/philosophy/po
  drwxrwsr-x+ 3 yavor www 143360 Apr 23 18:30 /web/www/www/philosophy/po
  vcs:/web/www# id ka2in
  uid=132709(ka2in) gid=1003(svusers) 
groups=1003(svusers),1018(www),2312(trans-coord),5693(www-ar),7081(gnun)

Because ka2in is in the www group and the www group has write
permission to the directory.

Sorry but that is what I know and don't know at this moment.

Bob