samba - Apr 2018 - Operation Not Supported error for GETXATTR when VFS plugin "nfs4acl_xattr" is used

Hi Ralph

Thanks a lot. With xattr_tdb I could at least list the files getting rid of
access denied error.

I still do not see the exactly mapped ACEs in the Security Descriptor of a
file in Windows Explorer but I will debug that little further and then come
back with questions.
I see only 1 entry of Everyone on Windows client side if there are added
ACEs using nfs4_setfacl.
Let me know if that works for you as expected.


Thanks
Akash




On Mon, Apr 9, 2018 at 10:26 PM, Ralph Böhme <slow at samba.org> wrote:
> On Mon, Apr 09, 2018 at 10:11:45PM +0530, Akash Jain wrote:
> > There are not more than 4 ACEs on the root directory but we see naces
> 50.
> > I feel that the encoding of ACL is not happening as expected.
>
> See my earlier mail about the encoding differences wrt to users and groups
> in
> the ACEs.
>
> Iirc parsing NFSv4 ACLs would require extensions to the module to support
> the
> string identifiers and mapping to ids.
>
> -slow
>
> --
> Ralph Boehme, Samba Team       https://samba.org/
> Samba Developer, SerNet GmbH   https://sernet.de/en/samba/
> GPG Key Fingerprint:           FAE2 C608 8A24 2520 51C5
>                                59E4 AA1E 9B71 2639 9E46
>

Hi Ralph

I do not think using xattr_tdb is the right thing to do for my purpose. We
do not wish to store/retrieve extended attributes to/from TDB file.

*<Ralph>*

*Iirc parsing NFSv4 ACLs would require extensions to the module to support
the string identifiers and mapping to ids.*
*</Ralph>*

Can you please elaborate more on which extensions you referred to?
What all basic things do we need to do to use nfs4acl_xattr module with
native NFS4 export mounted locally and shared through samba to get/set NT
ACLs?


Thanks
Akash


On Mon, Apr 9, 2018 at 11:11 PM, Akash Jain <akash.jain110683 at
gmail.com>
wrote:
> Hi Ralph
>
> Thanks a lot. With xattr_tdb I could at least list the files getting rid
> of access denied error.
>
> I still do not see the exactly mapped ACEs in the Security Descriptor of a
> file in Windows Explorer but I will debug that little further and then come
> back with questions.
> I see only 1 entry of Everyone on Windows client side if there are added
> ACEs using nfs4_setfacl.
> Let me know if that works for you as expected.
>
>
> Thanks
> Akash
>
>
>
>
> On Mon, Apr 9, 2018 at 10:26 PM, Ralph Böhme <slow at samba.org>
wrote:
>
>> On Mon, Apr 09, 2018 at 10:11:45PM +0530, Akash Jain wrote:
>> > There are not more than 4 ACEs on the root directory but we see
naces >> 50.
>> > I feel that the encoding of ACL is not happening as expected.
>>
>> See my earlier mail about the encoding differences wrt to users and
>> groups in
>> the ACEs.
>>
>> Iirc parsing NFSv4 ACLs would require extensions to the module to
support
>> the
>> string identifiers and mapping to ids.
>>
>> -slow
>>
>> --
>> Ralph Boehme, Samba Team       https://samba.org/
>> Samba Developer, SerNet GmbH   https://sernet.de/en/samba/
>> GPG Key Fingerprint:           FAE2 C608 8A24 2520 51C5
>>                                59E4 AA1E 9B71 2639 9E46
>>
>
>

On Tue, Apr 10, 2018 at 04:28:10PM +0530, Akash Jain
wrote:
> Can you please elaborate more on which extensions you referred to?
> What all basic things do we need to do to use nfs4acl_xattr module with
> native NFS4 export mounted locally and shared through samba to get/set NT
> ACLs?
I guess you have to patch the code, or find someone who does it for you. Iirc
currently the module doesn't offer what you're looking for and neither
does any
other module.

-slow

-- 
Ralph Boehme, Samba Team       https://samba.org/
Samba Developer, SerNet GmbH   https://sernet.de/en/samba/
GPG Key Fingerprint:           FAE2 C608 8A24 2520 51C5
                               59E4 AA1E 9B71 2639 9E46