Am 19.03.2015 um 17:39 schrieb Jeremy Allison:> On Thu, Mar 19, 2015 at 10:16:20AM -0400, Kevin Taylor wrote: > >> Unfortunately I'm not a programmer, so I don't know if there is an API or not. As far as me the user can tell is that we have an NFSv4 filesystem mounted on the linux box. We have tools available through the nfs4-acl-tools package (this is on CentOS 6, for example) that offer me the ability to read and set the ACLs on the volume. I figure at some level, someone must have had an API because these tools aren't specific to the underlying filesystem as this could really be offered from anything. > > Well the API is propably just stuffing blobs into extended > attributes directly from userspace. That's how most of > the NFSv4 ACLs usually get done :-(. > > Of course all implementations use different blobs containing > different things to do the same thing :-). >make sure that you dont run in a open files limit with ntfs4 acl on netapp ( i think this was in the orig question ) , there may be a max of 32000 per head ( if exist ) or 64000 in summa Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstra?e 15, 81669 M?nchen Sitz der Gesellschaft: M?nchen, Amtsgericht M?nchen: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein
On Thu, Mar 19, 2015 at 05:47:11PM +0100, Robert Schetterer wrote:> > Well the API is propably just stuffing blobs into extended > > attributes directly from userspace. That's how most of > > the NFSv4 ACLs usually get done :-(. > > > > Of course all implementations use different blobs containing > > different things to do the same thing :-). > > > > make sure that you dont run in a open files limit with ntfs4 acl on > netapp ( i think this was in the orig question ) , there may be a max of > 32000 per head ( if exist ) or 64000 in summaAre we talking about nfsv4 or ntfs(4)? And what limit is that? It can't make sense to limit the number of acls on a system. Volker -- SerNet GmbH, Bahnhofsallee 1b, 37081 G?ttingen phone: +49-551-370000-0, fax: +49-551-370000-9 AG G?ttingen, HRB 2816, GF: Dr. Johannes Loxen http://www.sernet.de, mailto:kontakt at sernet.de
Am 20.03.2015 um 10:45 schrieb Volker Lendecke:> On Thu, Mar 19, 2015 at 05:47:11PM +0100, Robert Schetterer wrote: >>> Well the API is propably just stuffing blobs into extended >>> attributes directly from userspace. That's how most of >>> the NFSv4 ACLs usually get done :-(. >>> >>> Of course all implementations use different blobs containing >>> different things to do the same thing :-). >>> >> >> make sure that you dont run in a open files limit with ntfs4 acl on >> netapp ( i think this was in the orig question ) , there may be a max of >> 32000 per head ( if exist ) or 64000 in summa > > Are we talking about nfsv4 or ntfs(4)? And what limit is > that? It can't make sense to limit the number of acls on a > system.sorry typo nfs4 acl4, this limits where anounced recent on a admin meeting using a netapp filer ( no idea what version etc ), this forced many problems in the past, so the workaround was to move back to nfs3 where acl are not needed> > Volker >Best Regards MfG Robert Schetterer -- [*] sys4 AG http://sys4.de, +49 (89) 30 90 46 64 Franziskanerstra?e 15, 81669 M?nchen Sitz der Gesellschaft: M?nchen, Amtsgericht M?nchen: HRB 199263 Vorstand: Patrick Ben Koetter, Marc Schiffbauer Aufsichtsratsvorsitzender: Florian Kirstein