search for: nfs4_acls

I am looking for where zfsacl settings such as, zfsacl: acesort = dontcare , are documented. Do I need NFS settings such as, nfs4: mode = simple , if I am not using NFS? If I do, where are they documented? Thanks

On Fri, Apr 06, 2018 at 12:40:31PM -0700, Jeremy Allison wrote: > On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > > Hi All > > > > > > > > I found there is one bug in the plugin. The

> Samba provides the "nfs4acl_xattr" vfs module precisely for that. I am not an expert in Windows ACL, but where do you see that the nfs4acl_xattr vfs module provides the support for "manage the ACLs on the OS of the Samba host directly?" From the Wiki page, https://wiki.samba.org/index.php/NFS4_ACL_overview, it implies the following four operation modes are possible.

On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > Hi All > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > per strace output of nfs4_setfacl is system.nfs4_acl. > > The source code has defined it as > > #define

Hi All I found there is one bug in the plugin. The name of the attribute for ACL as per strace output of nfs4_setfacl is *system.nfs4_acl.* The source code has defined it as #define NFS4ACL_XATTR_NAME ( "system.nfs4acl" ) Note there is missing underscore. After this, the EOPNOTSUPP error is not observed. Hope this helps Akash On Thu, Apr 5, 2018 at 11:43 PM, Jeremy Allison

Hi, the man page states For systems that support extended-attribute namespaces, a copy being done by a super-user copies all namespaces except system.*. That's the reason why NFAv4 ACLs are not copied as they are in the system.nfs4_acl (or system.nfs4acl) namespace. Why are those namespaces excluded? Not being able rsync ACLs von NFSv4 is a major drawback now that NFsv4 becomes

Hi, would someone please clarify the behavior of -X --filter='some_filter' to me? I was trying to copy a file on a NFS4 mount and some extended attributes get transferred only when run as a normal user with --super but not as root. If I have a file on nfs4 mount and I set some extended attributes like this: #rsync --version rsync? version 3.1.3? protocol version 31 Copyright (C)

...eeds group write access to attributes or it won’t attempt to write to the objects at all… So we (a co-worker of mine) created the following patch which seems to solve the issue (it basically lies and adds the “write to attributes” of “write to files” is set): --- samba-4.9.4-test/source3/modules/nfs4_acls.c 2018-07-12 10:23:36.000000000 +0200 +++ samba-4.9.4-mikha02/source3/modules/nfs4_acls.c 2019-03-04 11:29:29.263401000 +0100 @@ -380,6 +380,17 @@ DEBUG(10, ("Windows mapped ace flags: 0x%x => 0x%x\n", ace->aceFlags, win_ace_flags));...

Hello Jeremy and Ralph Thanks for your suggestions. I compiled samba-4.8.0 and running it instead of samba-4.6.2. I saw the changes that you mentioned in the latest vfs_nfs4acl_xattr module. The operation not supported error is gone but it is now failing with access denied. Here is what I tried: *[root at test3 ajain]# net conf showshare local[local] path = /home/ajain/mount

----- Original Message ----- > From: "Jeremy Allison" <jra at samba.org> > To: "Nick E Couchman" <nick.couchman at seakr.com> > Cc: samba at lists.samba.org > Sent: Friday, December 4, 2015 1:22:06 PM > Subject: Re: [Samba] Linux & NFSv4 ACLs > On Thu, Dec 03, 2015 at 07:31:36PM -0700, Nick Couchman wrote: >> >> Try these pages (U

On Fri, Mar 17, 2017 at 1:54 PM, Volker Lendecke <vl at samba.org> wrote: > On Thu, Mar 16, 2017 at 05:38:57PM +0100, Christoph Kleineweber wrote: > > I am wondering if there is a way to bypass Samba's ACL checks and > delegate > > access control completely to the underlying file system. > > > > My problem arises from the following scenario: Our file system

Hello All I am trying to use nfs4acl_xattr plugin from samba source code. https://www.samba.org/samba/docs/current/man-html/vfs_nfs4acl_xattr.8.html I mounted NFSv4 mount point locally and exported it through samba with vfs objects set to nfs4acl_xattr. *[root at test3 ajain]# net conf showshare local[local] path = /home/ajain/mount comment = local share guest ok =

----- Original Message ----- > From: "Jeremy Allison" <jra at samba.org> > To: "Nick E Couchman" <nick.couchman at seakr.com> > Cc: samba at lists.samba.org > Sent: Thursday, December 3, 2015 6:13:51 PM > Subject: Re: [Samba] Linux & NFSv4 ACLs > On Thu, Dec 03, 2015 at 06:03:39PM -0700, Nick Couchman wrote: >> >> > On Dec 3,

...is not working as well. Since the SIDs S-1-5-88-3-<mode> are unknown users to Samba, Unix permissions are not supported and can't be changed on the client. Furthermore, I found that these NFS ACLs are in fact are not simply unknown, but is actively stripped by Samba. According to [8], in nfs4_acls.c, they're silently ignored without being written into the NFSv4 ACL of the underlying filesystem. if (security_descriptor_with_ms_nfs(psd)) { return NT_STATUS_OK; } Is there any correct or alternative way to use S-1-5-88 NFS ACEs in Samba? Did anyone have any success? If there's no w...

On Fri, Dec 04, 2015 at 01:37:33PM -0700, Nick Couchman wrote: > ----- Original Message ----- > > From: "Jeremy Allison" <jra at samba.org> > > To: "Nick E Couchman" <nick.couchman at seakr.com> > > Cc: samba at lists.samba.org > > Sent: Friday, December 4, 2015 1:22:06 PM > > Subject: Re: [Samba] Linux & NFSv4 ACLs > >

On Mon, 2017-03-20 at 10:57 +0100, Christoph Kleineweber via samba wrote: > On Fri, Mar 17, 2017 at 1:54 PM, Volker Lendecke <vl at samba.org> > wrote: > > > On Thu, Mar 16, 2017 at 05:38:57PM +0100, Christoph Kleineweber > > wrote: > > > I am wondering if there is a way to bypass Samba's ACL checks and > > > > delegate > > > access

On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > Hi All > > I found there is one bug in the plugin. The name of the attribute for ACL as > per strace output of nfs4_setfacl is system.nfs4_acl. > The source code has defined it as > #define NFS4ACL_XATTR_NAME      ( "system.nfs4acl" ) > > Note there is missing underscore. > > After this, the

On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > Hi All > > > > > > I found there is one bug in the plugin. The name of the attribute for ACL as > > > per strace output of nfs4_setfacl is

On Fri, Apr 06, 2018 at 09:28:16PM +0200, Ralph Böhme wrote: > On Fri, Apr 06, 2018 at 12:40:31PM -0700, Jeremy Allison wrote: > > On Fri, Apr 06, 2018 at 09:22:17PM +0200, Ralph Böhme wrote: > > > On Fri, Apr 06, 2018 at 10:27:32AM -0700, Jeremy Allison via samba wrote: > > > > On Fri, Apr 06, 2018 at 01:44:50PM +0530, Akash Jain wrote: > > > > > Hi

Author: lisagab Repository: /hg/zfs-crypto/gate Revision: bea1516fc595714f8684eb7ea36d6a5d25062ec4 Log message: 6358522 ACL: When given unsupported special identifiers error w/ NFS4ERR_BADOWNER not NFS4ERR_ATTRNOTSUP Files: update: usr/src/uts/common/fs/nfs/nfs4_acl.c