Unsolved

This post is more than 5 years old

782

August 29th, 2017 13:00

Failed verifying security descriptor on MAX_LIN. The group cannot be of type UID

I started seeing a couple weeks ago:

2017-08-29T00:54:39-07:00 cluster-1 /boot/kernel.amd64/kernel: [bam_acl.c:323](pid 2869="lwio")(tid=100917) ifs_verify_sd: Failed verifying security descriptor on lin:1:2595:5a5e. The group cannot be of type UID.

2017-08-29T00:55:05-07:00 cluster-15 /boot/kernel.amd64/kernel: [bam_acl.c:323](pid 2869="lwio")(tid=100868) ifs_verify_sd: Failed verifying security descriptor on MAX_LIN. The group cannot be of type UID.

My (18) node cluster now logs ~3-4 million of these messages per day -- started abruptly on 2017-08-11 (yeah, we're trying to figure out what we changed on that day).

OneFS 8.0.0.4 / NL410s & S210s / both SMB and NFS clients -- diverse work-flows (which is my way of saying "we have no idea what our users are doing")

Attempting to parse the error message:

- Generated by block_allocation_manager_access_control_list.c

- The calling process is 'lwio', which I'm guessing is a foundational chunk of the LikeWise protocol engine

- LikeWise cares about validating access to LINs, and apparently ran into something it didn't like about the security descriptor associated with lin {xyz}.  Although sometimes ... looks like a bug to me ... lwio is unable to identify the offending LIN identifier and emits the string "MAX_LIN" in its place.

- The phrase "The group cannot be of type UID" is opaque to me.  (My way of saying "I have no clue here".)

Anyone have insights to offer?

--sk

6 Operator

 • 

1.2K Posts

August 30th, 2017 02:00

Recommend to open a SR, plus here are three quick thoughts:

To identify the path for a given LIN:

# isi get -L 1:02b9:0012

A valid path for LIN 0x102b90012 is /ifs/data/test

With millions of log messages per day, you are running into risk

of wearing out the bootflash drives, see How to Measure SSD Wear Level on Isilon OneFS

Have you considered running an IntegrityScan job yet?

-- Peter

No Events found!

Top