OpenNebula

Hello,

I'm unable to shedule VM on cluster authorized by secondary groups.

• OpenNebula 4.10.2
• Share qcow2 images datastore 101 (no cluster for that datastore)
• User “foo” in primary group users (1) and in secondary group “test-group” (id 103)
• Group “test-group” (id 103) has an admin “test-group-admin” and use resources from cluster “101”
• Cluster “101” contains host 4, vnet 486 and system datastore 103

VM template:

• Use qcow2 image from datastore 101 (usable by all hosts)

Starting the VM in cloud view with network 486:

• as user “test-group-admin” => everything is OK, the VM starts and is running
• as user “foo” => sheduling is impossible with the following log

Fri Nov 13 16:26:37 2015 [Z0][VM][D]: Pending/rescheduling VM and capacity requirements:
      VM  CPU      Memory   System DS  Image DS
------------------------------------------------------------
   22228   50      524288       40960  DS 101: 0 
Fri Nov 13 16:26:37 2015 [Z0][HOST][D]: Discovered Hosts (enabled):
 2 3 4
Fri Nov 13 16:26:37 2015 [Z0][SCHED][D]: VM 22228: Host 2 filtered out. It does not fulfill SCHED_REQUIREMENTS.
Fri Nov 13 16:26:37 2015 [Z0][SCHED][D]: VM 22228: Host 3 filtered out. It does not fulfill SCHED_REQUIREMENTS.
Fri Nov 13 16:26:37 2015 [Z0][SCHED][D]: VM 22228: Host 4 filtered out. User is not authorized to MANAGE it.
Fri Nov 13 16:26:37 2015 [Z0][SCHED][I]: Scheduling Results:

Here are some IRC logs:

<rsmontero> we only take the gid from the VM, but we could include all the groups of the owner
<rsmontero> https://github.com/OpenNebula/one/blob/master/src/scheduler/src/sched/Scheduler.cc#L547
<rsmontero> all the logic is happening around that line

Regards.