search for: nfs4_acl

I am looking for where zfsacl settings such as, zfsacl: acesort = dontcare , are documented. Do I need NFS settings such as, nfs4: mode = simple , if I am not using NFS? If I do, where are they documented? Thanks

...ia samba wrote: > > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > > Hi All > > > > > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > > > per strace output of nfs4_setfacl is system.nfs4_acl. > > > > The source code has defined it as > > > > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > > > > > > > Note there is missing underscore. > > > > > > > > After this, the EOPNOTSUPP error is not obser...

...he "nfs4acl_xattr" vfs module precisely for that. I am not an expert in Windows ACL, but where do you see that the nfs4acl_xattr vfs module provides the support for "manage the ACLs on the OS of the Samba host directly?" From the Wiki page, https://wiki.samba.org/index.php/NFS4_ACL_overview, it implies the following four operation modes are possible. (1) Windows SMB Server with ACL, Linux cifs vfs kernel module, probably meant mounting with -t cifs. This supports Windows ACL on mounted filesystem on Linux. (2) Windows NFSv4 Server with ACL. Linux nfsv4 client. This suppo...

...Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > Hi All > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > per strace output of nfs4_setfacl is system.nfs4_acl. > > The source code has defined it as > > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > > > Note there is missing underscore. > > > > After this, the EOPNOTSUPP error is not observed. > > > > Hope this helps > > Hmmm. T...

Hi All I found there is one bug in the plugin. The name of the attribute for ACL as per strace output of nfs4_setfacl is *system.nfs4_acl.* The source code has defined it as #define NFS4ACL_XATTR_NAME ( "system.nfs4acl" ) Note there is missing underscore. After this, the EOPNOTSUPP error is not observed. Hope this helps Akash On Thu, Apr 5, 2018 at 11:43 PM, Jeremy Allison <jra at samba.org> wrote: > On...

Hi, the man page states For systems that support extended-attribute namespaces, a copy being done by a super-user copies all namespaces except system.*. That's the reason why NFAv4 ACLs are not copied as they are in the system.nfs4_acl (or system.nfs4acl) namespace. Why are those namespaces excluded? Not being able rsync ACLs von NFSv4 is a major drawback now that NFsv4 becomes standard oder v3 and ACLs are getting more widely used. cu, Frank -- Dipl.-Inform. Frank Steiner Web: http://www.bio.ifi.lmu.de/~steiner/ Lehrstuh...

...fs_test_mountpoint/test_file D::OWNER@:x A::OWNER@:rwatTcCy A::0:rwaxtcy?? <--------------- A::1000:rwaxtcy? <-------------- A::GROUP@:rwatcy A::EVERYONE@:rtcy Then when I use rsync, different attributes are copied when running as testuser or root: ROOT: # rsync -X --filter='-x! system.nfs4_acl' /tmp/nfs_test_mountpoint/test_file /tmp/nfs_test_mountpoint/test_file_synced_root # nfs4_getfacl /tmp/nfs_test_mountpoint/test_file_synced_root D::OWNER@:x A::OWNER@:rwatTcCy A::0:rxtcy?? <------- A::1000:rxtcy??? <------- A::GROUP@:rtcy A::EVERYONE@:rtcy TESTUSER: # rsync --super -X...

...eeds group write access to attributes or it won’t attempt to write to the objects at all… So we (a co-worker of mine) created the following patch which seems to solve the issue (it basically lies and adds the “write to attributes” of “write to files” is set): --- samba-4.9.4-test/source3/modules/nfs4_acls.c 2018-07-12 10:23:36.000000000 +0200 +++ samba-4.9.4-mikha02/source3/modules/nfs4_acls.c 2019-03-04 11:29:29.263401000 +0100 @@ -380,6 +380,17 @@ DEBUG(10, ("Windows mapped ace flags: 0x%x => 0x%x\n", ace->aceFlags, win_ace_flags));...

...ess denied. Here is what I tried: *[root at test3 ajain]# net conf showshare local[local] path = /home/ajain/mount comment = local share guest ok = no read only = no hosts allow = ALL vfs objects = nfs4acl_xattr* * nfs4acl_xattr:xattr_name = system.nfs4_acl nfs4acl_xattr:encoding = xdr* I added/enabled some debug messages and here is what I see for XDR type: *[2018/04/09 21:53:34.024425, 3, pid=32098, effective(1101151, 1100513), real(1101151, 0)] ../source3/smbd/trans2.c:2667(call_trans2findfirst) call_trans2findfirst: dirtype = 16...

...: base >> Matched from: >> Filename : /usr/bin/nfs4_getfacl > > Thanks for that. The problem is /usr/bin/nfs4_getfacl > uses an internal library to get marshall/unmarshall the > ACL data into EA's. I don't think that library is > installed (and there's no nfs4_acl-dev package). If I do a "ldd /usr/bin/nfs4_getfacl" here are the results: [root at pv-nas ~]# ldd `which nfs4_getfacl` linux-vdso.so.1 => (0x00007fffa76f6000) libattr.so.1 => /lib64/libattr.so.1 (0x00007ffe77f2c000) libc.so.6 => /lib64/libc.so.6 (0x00007ffe77b98000) /lib64/...

...ls. I found the existing NFSv4 ACL VFS module in Samba (nfs4acl_xattr), which seems to be build on a different implementation. The referenced website ( http://www.suse.de/~agruen/nfs4acl/) does not exist anymore and the xattr to access ACLs is different (system.nfs4acl for nfs4acl_xattr and system.nfs4_acl for nfs4-acl-tools). Is this a known issue? Kind regards, Christoph -- Quobyte GmbH, Berlin, AG Charlottenburg HRB 149012 B, Jan Stender, Felix Hupfeld, Bjoern Kolbeck

Hello All I am trying to use nfs4acl_xattr plugin from samba source code. https://www.samba.org/samba/docs/current/man-html/vfs_nfs4acl_xattr.8.html I mounted NFSv4 mount point locally and exported it through samba with vfs objects set to nfs4acl_xattr. *[root at test3 ajain]# net conf showshare local[local] path = /home/ajain/mount comment = local share guest ok =

----- Original Message ----- > From: "Jeremy Allison" <jra at samba.org> > To: "Nick E Couchman" <nick.couchman at seakr.com> > Cc: samba at lists.samba.org > Sent: Thursday, December 3, 2015 6:13:51 PM > Subject: Re: [Samba] Linux & NFSv4 ACLs > On Thu, Dec 03, 2015 at 06:03:39PM -0700, Nick Couchman wrote: >> >> > On Dec 3,

...is not working as well. Since the SIDs S-1-5-88-3-<mode> are unknown users to Samba, Unix permissions are not supported and can't be changed on the client. Furthermore, I found that these NFS ACLs are in fact are not simply unknown, but is actively stripped by Samba. According to [8], in nfs4_acls.c, they're silently ignored without being written into the NFSv4 ACL of the underlying filesystem. if (security_descriptor_with_ms_nfs(psd)) { return NT_STATUS_OK; } Is there any correct or alternative way to use S-1-5-88 NFS ACEs in Samba? Did anyone have any success? If there's no...

...> >> Filename : /usr/bin/nfs4_getfacl > > > > Thanks for that. The problem is /usr/bin/nfs4_getfacl > > uses an internal library to get marshall/unmarshall the > > ACL data into EA's. I don't think that library is > > installed (and there's no nfs4_acl-dev package). > > If I do a "ldd /usr/bin/nfs4_getfacl" here are the results: > [root at pv-nas ~]# ldd `which nfs4_getfacl` > linux-vdso.so.1 => (0x00007fffa76f6000) > libattr.so.1 => /lib64/libattr.so.1 (0x00007ffe77f2c000) > libc.so.6 => /lib64/libc.so.6...

...VFS module in Samba (nfs4acl_xattr), > which > seems to be build on a different implementation. The referenced > website ( > http://www.suse.de/~agruen/nfs4acl/) does not exist anymore and the > xattr > to access ACLs is different (system.nfs4acl for nfs4acl_xattr and > system.nfs4_acl for nfs4-acl-tools). Is this a known issue? Is it just an issue with the name, or is the on-disk format different as well? Thanks, Andrew Bartlett -- Andrew Bartlett http://samba.org/~abartlet/ Authentication Developer, Samba Team http://samba.org Samba Developer, Cataly...

On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > Hi All > > I found there is one bug in the plugin. The name of the attribute for ACL as > per strace output of nfs4_setfacl is system.nfs4_acl. > The source code has defined it as > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > Note there is missing underscore. > > After this, the EOPNOTSUPP error is not observed. > > Hope this helps Hmmm. This has been changed for Samba 4.8.0 and above, wi...

...M -0700, Jeremy Allison via samba wrote: > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > Hi All > > > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > > per strace output of nfs4_setfacl is system.nfs4_acl. > > > The source code has defined it as > > > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > > > > > Note there is missing underscore. > > > > > > After this, the EOPNOTSUPP error is not observed. > > > > >...

...> > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > > > Hi All > > > > > > > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > > > > per strace output of nfs4_setfacl is system.nfs4_acl. > > > > > The source code has defined it as > > > > > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > > > > > > > > > Note there is missing underscore. > > > > > > > > > > After this, the...

Author: lisagab Repository: /hg/zfs-crypto/gate Revision: bea1516fc595714f8684eb7ea36d6a5d25062ec4 Log message: 6358522 ACL: When given unsupported special identifiers error w/ NFS4ERR_BADOWNER not NFS4ERR_ATTRNOTSUP Files: update: usr/src/uts/common/fs/nfs/nfs4_acl.c