<div dir="ltr">I think you're running an older version of swift, but I'm pretty sure that loadapp line is right after drop_privledges in run_wsgi.<div><br></div><div>So the process starts as root, and can read the config - then it drops privileges to the run user configured in the conf and can't access the file anymore.<br>
<div><br></div><div>... but everything you pasted looks right.</div><div><br></div><div>You should make sure you can read the file as swift (`su - swift; cat /etc/swift/account-server.conf`), you should make sure the pwd.getpwnam isn't some how mis reading the "[DEFAULT] user = swift" option (`python -c "import pwd, swift.common.utils; assert 'swift' == pwd.getpwnam(swift.common.utils.readconf('/etc/swift/account-server/1.conf', 'app:account-server')['user'])[0]"`</div>
</div><div><br></div><div>-Clay</div></div><div class="gmail_extra"><br><br><div class="gmail_quote">On Wed, Aug 14, 2013 at 6:59 PM, Snider, Tim <span dir="ltr"><<a href="mailto:Tim.Snider@netapp.com" target="_blank">Tim.Snider@netapp.com</a>></span> wrote:<br>
<blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex">
<div>
<div style="direction:ltr;font-size:10pt;font-family:Tahoma">Through an unfortunate series of events I get "permission denied" trying to start the account, container, and object server. Circumstantial evidence points to (maybe) the swift
user/group or something with syslog being messed up. If someone could give me some pointers I'd appreciate it. This happens for all servers. I've included just the account-server dump for ease.
<div>Thanks,</div>
<div>Tim</div>
<div><br>
</div>
<div><br>
</div>
<div>
<div>root@swift21:/home/swift# </div>
<div>root@swift21:/home/swift# swift-init start account-server</div>
<div>Starting account-server...(/etc/swift/account-server.conf)</div>
<div>Traceback (most recent call last):</div>
<div> File "/usr/bin/swift-account-server", line 22, in <module></div>
<div> run_wsgi(conf_file, 'account-server', default_port=6002, **options)</div>
<div> File "/usr/lib/python2.7/dist-packages/swift/common/wsgi.py", line 122, in run_wsgi</div>
<div> loadapp('config:%s' % conf_file, global_conf={'log_name': log_name})</div>
<div> File "/usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py", line 247, in loadapp</div>
<div> return loadobj(APP, uri, name=name, **kw)</div>
<div> File "/usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py", line 271, in loadobj</div>
<div> global_conf=global_conf)</div>
<div> File "/usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py", line 296, in loadcontext</div>
<div> global_conf=global_conf)</div>
<div> File "/usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py", line 317, in _loadconfig</div>
<div> loader = ConfigLoader(path)</div>
<div> File "/usr/lib/python2.7/dist-packages/paste/deploy/loadwsgi.py", line 393, in __init__</div>
<div> with open(filename) as f:</div>
<div>IOError: [Errno 13] Permission denied: '/etc/swift/account-server.conf'</div>
<div><br>
</div>
<div>root@swift21:/home/swift# ls -l /etc/swift/*conf</div>
<div>-rw-r--r-- 1 swift swift 422 Aug 14 15:16 /etc/swift/account-server.conf</div>
<div>-rw-r--r-- 1 swift swift 458 Aug 14 15:14 /etc/swift/container-server.conf</div>
<div>-rw-r--r-- 1 swift swift 454 Jul 18 10:40 /etc/swift/dispersion.conf</div>
<div>-rw-r--r-- 1 swift swift 541 Aug 14 15:17 /etc/swift/object-server.conf</div>
<div>-rw-rw---- 1 swift swift 1975 Aug 12 06:53 /etc/swift/proxy-server.conf</div>
<div>-rw-rw---- 1 swift swift 51 Jun 28 11:36 /etc/swift/swift.conf</div>
<div>root@swift21:/home/swift# cat /etc/swift/account-server.conf </div>
<div>[DEFAULT]</div>
<div>devices = /srv/accounts</div>
<div>#devices = /srv/node</div>
<div>bind_ip = 192.168.10.208</div>
<div>bind_port = 6002</div>
<div>mount_check = false</div>
<div>user = swift</div>
<div>log_facility = LOG_LOCAL0</div>
<div>workers = 1</div>
<div>log_level = WARNING</div>
<div>eventlet_debug = true</div>
<div>log_name = swift-account-server</div>
<div><br>
</div>
<div>[pipeline:main]</div>
<div>pipeline = account-server</div>
<div><br>
</div>
<div>[app:account-server]</div>
<div>use = egg:swift#account</div>
<div><br>
</div>
<div>[account-replicator]</div>
<div>concurrency = 8</div>
<div><br>
</div>
<div>[account-auditor]</div>
<div><br>
</div>
<div>[account-reaper]</div>
<div>concurrency = 8</div>
<div>root@swift21:/home/swift# ls -l /var/log|grep swift</div>
<div>drwxr-xr-x 2 root root 4096 Aug 14 18:19 swift</div>
<div>root@swift21:/home/swift# ls -l /var/log/swift/</div>
<div>total 2788</div>
<div>-rw-r--r-- 1 root root 0 Aug 14 18:14 a</div>
<div>-rw-r--r-- 1 root root 0 Aug 14 18:14 aa</div>
<div>-rw-r----- 1 syslog adm 113426 Aug 14 18:56 account.error</div>
<div>-rw-r----- 1 syslog adm 0 Aug 14 18:19 account.log</div>
<div>-rw-r----- 1 syslog adm 2027935 Aug 14 18:56 container.error</div>
<div>-rw-r----- 1 syslog adm 0 Aug 14 18:19 container.log</div>
<div>-rw-r----- 1 syslog adm 9888 Aug 14 18:56 object.error</div>
<div>-rw-r----- 1 syslog adm 0 Aug 14 18:19 object.log</div>
<div>-rw-r----- 1 syslog adm 0 Aug 14 18:19 proxy.error</div>
<div>-rw-r----- 1 syslog adm 0 Aug 14 18:19 proxy.log</div>
<div>-rw-r----- 1 syslog adm 196436 Aug 14 18:56 rsync.error</div>
<div>-rw-r----- 1 syslog adm 483715 Aug 14 18:56 rsync.log</div>
<div>root@swift21:/home/swift# </div>
</div>
<div><br>
</div>
<div><br>
</div>
</div>
</div>
<br>_______________________________________________<br>
Mailing list: <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
Post to : <a href="mailto:openstack@lists.openstack.org">openstack@lists.openstack.org</a><br>
Unsubscribe : <a href="http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack" target="_blank">http://lists.openstack.org/cgi-bin/mailman/listinfo/openstack</a><br>
<br></blockquote></div><br></div>