hi there - is it possible to share a directory via samba and (kernel-)nfsv4 in parallel and make samba use (ie.: read, write and enforce) nfsv4 acls to implement winnt-acls? i know that using nfs3 and posix acls is working halfway okay, but couldn't find anything useful for nfsv4 and the associated acls - sorry if i missed something obvious. i played around with the nfs4acl_xattr and acl_xattr vfs objects, only to find that the extended attributes written by those are entirely different from the system.posix_acl_access that nfsv4 seems to use. would re-exporting a nfsv4 share mounted on a nfsv4 client via samba work? thank you very much & with kind regards, t. -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: OpenPGP digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20190823/ba31edad/signature.sig>
On 8/23/19 3:56 PM, thoralf schulze via samba wrote:> hi there - > > is it possible to share a directory via samba and (kernel-)nfsv4 in > parallel and make samba use (ie.: read, write and enforce) nfsv4 acls to > implement winnt-acls? > > i know that using nfs3 and posix acls is working halfway okay, but > couldn't find anything useful for nfsv4 and the associated acls - sorry > if i missed something obvious. i played around with the nfs4acl_xattr > and acl_xattr vfs objects, only to find that the extended attributes > written by those are entirely different from the system.posix_acl_access > that nfsv4 seems to use.take a look at the upcoming 4.11 where vfs_nfs4acl_xattr has a new nfs4acl_xattr:encoding=nfs mode. -slow -- Ralph Boehme, Samba Team https://samba.org/ Samba Developer, SerNet GmbH https://sernet.de/en/samba/ GPG-Fingerprint FAE2C6088A24252051C559E4AA1E9B7126399E46
hi Ralph, On 8/23/19 4:16 PM, Ralph Boehme wrote: [?]> take a look at the upcoming 4.11 where vfs_nfs4acl_xattr has a new > nfs4acl_xattr:encoding=nfs mode.thank you very much for your answer - i'm going to have a look at rc2. cheers, t. -------------- next part -------------- A non-text attachment was scrubbed... Name: signature.asc Type: application/pgp-signature Size: 833 bytes Desc: OpenPGP digital signature URL: <http://lists.samba.org/pipermail/samba/attachments/20190826/029e9082/signature.sig>
hi ralph, On 8/23/19 4:16 PM, Ralph Boehme wrote:> take a look at the upcoming 4.11 where vfs_nfs4acl_xattr has a new > nfs4acl_xattr:encoding=nfs mode.thank you for your work on this ? i managed to backport this to 4.9 and am running some tests. just to make sure: this vfs module is meant to be used with a samba server that re-shares an nfsv4-share, right? it is not intended to be used on the nfsv4 server to export the same directory via cifs and nfsv4 simultaneously? the usage of the system.nfs4_acl-xattrs with nfs4acl_xattr:encoding = nfs hints at the former ? cheers, t.