Hi All,
I'm having a frustrating time exporting a GPFS Independent Writer AFM
fileset through Samba.
Native GPFS directories exported through Samba seem to work properly, but when
creating an export which points to an AFM IW fileset, I get "Access
Denied" errors when trying to create files from an SMB client and even more
unusual "Failed to enumerate objects in the container: Access is
denied." messages if I try to modify the Access Control Entries through a
Windows client.
Here is the smb.conf file:
***[BEGIN smb.conf]***
[global]
idmap config * : backend = autorid
idmap config * : range = 100000-999999
idmap config THECRICK : backend = ad
idmap config THECRICK : schema_mode = rfc2307
idmap config THECRICK : range = 30000000-31999999
local master = no
realm = THECRICK.ORG
security = ADS
aio read size = 1
aio write size = 1
async smb echo handler = yes
clustering = yes
ctdbd socket = /var/run/ctdb/ctdbd.socket
ea support = yes
force unknown acl user = yes
level2 oplocks = no
log file = /var/log/samba/log.%m
log level = 3
map hidden = yes
map readonly = no
netbios name = MS_GENERAL
printcap name = /etc/printcap
printing = lprng
server string = Samba Server Version %v
socket options = TCP_NODELAY SO_KEEPALIVE TCP_KEEPCNT=4 TCP_KEEPIDLE=240
TCP_KEEPINTVL=15
store dos attributes = yes
strict allocate = yes
strict locking = no
unix extensions = no
vfs objects = shadow_copy2 syncops fileid streams_xattr gpfs
gpfs:dfreequota = yes
gpfs:hsm = yes
gpfs:leases = yes
gpfs:prealloc = yes
gpfs:sharemodes = yes
gpfs:winattr = yes
nfs4:acedup = merge
nfs4:chown = yes
nfs4:mode = simple
notify:inotify = yes
shadow:fixinodes = yes
shadow:format = @GMT-%Y.%m.%d-%H.%M.%S
shadow:snapdir = .snapshots
shadow:snapdirseverywhere = yes
shadow:sort = desc
smbd:backgroundqueue = false
smbd:search ask sharemode = false
syncops:onmeta = no
workgroup = THECRICK
winbind enum groups = yes
winbind enum users = yes
[production_rw]
comment = Production writable
path = /general/production
read only = no
[stp-test]
comment = STP Test Export
path = /general/export/stp/stp-test
read-only = no
***[END smb.conf]***
The [production_rw] export is a test directory on the /general filesystem which
works from an SMB client. The [stp-test] export is an AFM fileset on the
/general filesystem which is a cache of a directory in another GPFS filesystem:
***[BEGIN mmlsfileset general crick.general.export.stp.stp-test --afm -L]***
Attributes for fileset crick.general.export.stp.stp-test:
=========================================================Status
Linked
Path /general/export/stp/stp-test
Id 1
Root inode 1048579
Parent Id 0
Created Fri Jul 1 15:56:48 2016
Comment
Inode space 1
Maximum number of inodes 200000
Allocated inodes 100000
Permission change flag chmodAndSetacl
afm-associated Yes
Target gpfs:///camp/stp/stp-test
Mode independent-writer
File Lookup Refresh Interval 30 (default)
File Open Refresh Interval 30 (default)
Dir Lookup Refresh Interval 60 (default)
Dir Open Refresh Interval 60 (default)
Async Delay 15 (default)
Last pSnapId 0
Display Home Snapshots no
Number of Gateway Flush Threads 4
Prefetch Threshold 0 (default)
Eviction Enabled yes (default)
***[END mmlsfileset general crick.general.export.stp.stp-test --afm -L]***
Anyone spot any glaringly obvious misconfigurations?
Samba version 4.3.8-SerNet-RedHat-22.1.el6 CentOS release 6.7 (Final) Kernel:
2.6.32-573.12.1.el6.x86_64
Cheers,
Luke.
Luke Raimbach
Senior HPC Data and Storage Systems Engineer,
The Francis Crick Institute,
Gibbs Building,
215 Euston Road,
London NW1 2BE.
E: luke.raimbach at crick.ac.uk
W: www.crick.ac.uk
The Francis Crick Institute Limited is a registered charity in England and Wales
no. 1140062 and a company registered in England and Wales no. 06885462, with its
registered office at 215 Euston Road, London NW1 2BE.