search for: nfs4_getfacl

...t;> >> and here: >> http://wiki.linux-nfs.org/wiki/index.php/ACLs >> >> I'm pretty sure that first link is the source that the RHEL/CentOS tools comes >> from. Here's output from YUM on CentOS >> >> [root at snapshots ~]# yum whatprovies *bin/nfs4_getfacl >> Loaded plugins: fastestmirror >> No such command: whatprovies. Please use /usr/bin/yum --help >> [root at snapshots ~]# yum whatprovides *bin/nfs4_getfacl >> Loaded plugins: fastestmirror >> Loading mirror speeds from cached hostfile >> * extras: linux.mirror...

...utomatic mounting of sub-filesystems, etc., I >> >> really need it to use NFSv4. >> >> >> >> Any advice? >> > >> > How are the NFSv4 ACL exposed to Linux command-line >> > tools ? Are there such ? >> >> Yeah, CentOS 7 has nfs4_getfacl and nfs4_setfacl. Will send example output. > > OK, what I need is access to the source code of > these to see how they're getting programatic > access to the ACL data. > > Given that it shouldn't be too hard to adapt > source3/modules/vfs_nfs4acl_xattr.c to use the...

...; >> http://wiki.linux-nfs.org/wiki/index.php/ACLs > >> > >> I'm pretty sure that first link is the source that the RHEL/CentOS tools comes > >> from. Here's output from YUM on CentOS > >> > >> [root at snapshots ~]# yum whatprovies *bin/nfs4_getfacl > >> Loaded plugins: fastestmirror > >> No such command: whatprovies. Please use /usr/bin/yum --help > >> [root at snapshots ~]# yum whatprovides *bin/nfs4_getfacl > >> Loaded plugins: fastestmirror > >> Loading mirror speeds from cached hostfile > &g...

...to mount the filesystems in question with NFSv3 + ACLs - due to NFS referrals, automatic mounting of sub-filesystems, etc., I really need it to use NFSv4. >> >> Any advice? > > How are the NFSv4 ACL exposed to Linux command-line > tools ? Are there such ? Yeah, CentOS 7 has nfs4_getfacl and nfs4_setfacl. Will send example output. == This e-mail may contain SEAKR Engineering (SEAKR) Confidential and Proprietary Information. If this message is not intended for you, you are strictly prohibited from using this message, its contents or attachments in any way. If you have received thi...

...nts, ??? socketpairs, hardlinks, symlinks, IPv6, batchfiles, inplace, ??? append, ACLs, xattrs, iconv, symtimes, prealloc ... # nfs4_setfacl -a A::root at localhost:rwaxtcy /tmp/nfs_test_mountpoint/test_file # nfs4_setfacl -a A::testuser at localhost:rwaxtcy /tmp/nfs_test_mountpoint/test_file # nfs4_getfacl /tmp/nfs_test_mountpoint/test_file # file: /tmp/nfs_test_mountpoint/test_file D::OWNER@:x A::OWNER@:rwatTcCy A::0:rwaxtcy?? <--------------- A::1000:rwaxtcy? <-------------- A::GROUP@:rwatcy A::EVERYONE@:rtcy Then when I use rsync, different attributes are copied when running as testuser or...

...what we have, and what we'd like to do: Storage is a Netapp (cluster mode CDOT 8.2 I believe), it's NFS exported to our linux system. Linux system is CentOS 6 and can NFS mount the Netapp using version 4. NFSv3 doesn't support ACLs with Netapp, but NFSv4 does with the nfs4_setfacl and nfs4_getfacl commands. We'd like to share out the NFS mounted volume with samba, and retain the NFSv4 acl capability so that Windows users can set advanced permissions on the files. Is this possible? I've seen posts about the ZFS ability and the GPFS ability, but none of those are really what we...

...messpace will fail with EOPNOTSUPP, regardless of > priveleges." > > Can you check with 4.8.x ? I guess that statement may not be correct, depending on which kernel subsystem exposes the xattr? My testing was with local filesytems, not with nfsv4 mounts. Apparantly it works with nfs4_getfacl|nfs4_setfacl... -slow -- Ralph Boehme, Samba Team https://samba.org/ Samba Developer, SerNet GmbH https://sernet.de/en/samba/ GPG Key Fingerprint: FAE2 C608 8A24 2520 51C5 59E4 AA1E 9B71 2639 9E46

Hai..   I need to have my home dirs shared over some of my servers. I did setup a nfs4 kerberos base Debian jessie, samba 4.1.17 and sernet samba 4.1.3 on these servers.   This works, i can mount without problems.   But because verything is created with the windows user tools, the owner/Group is root. Like this   Server:   ls -al drwxrwx---+  2 root  root 4096 Sep  4 13:17

...# cd someuser / -su: cd: someuser /: Permission denied root at rtd-print1:/home/users2# ls -al total 16 drwxr-xr-x 3 root root 4096 Sep 7 10:18 . drwxr-xr-x 8 root root 4096 Sep 7 10:16 .. drwxrwx--- 2 root root 4096 Sep 7 10:18 someuser even root cant access the user folder .. the outpur of nfs4_getfacl someuser A::OWNER@:rwaDxtTcCy A::root at rotterdam.bazuin.nl:rwaDxtcy A:: someuser at rotterdam.bazuin.nl:rwaDxtcy A::GROUP@:tcy A:g:root at rotterdam.bazuin.nl:tcy A:g:BUILTIN\administrators at rotterdam.bazuin.nl:rwaDxtcy A::EVERYONE@:tcy A:fdi:OWNER@:rwaDxtTcCy A:fdi:root at rotterdam.bazuin.nl...

...T 17 ACLs only) . How can I do the same with Samba 4 ? Posix-ACLs set on the server with setfacl are recogniced on a windows-client. But every change I do on a windows-client is not visible on the posix-side (i.e. not reflected on the fileserver or on a NFS4-client using getfacl or nfs4_getfacl) Do I make some trivial mistake, is it just the samba4 version used or is it in general not longer possible/supported to restrict Samba to Posix-ACLs understood in an ext4-enviroment? Thanks for any hint. OS: Ubuntu 14.04 LTS , Samba: samba 2:4.1.6+dfsg-1ubuntu2 <https://forums.linuxmint.com/...

...riveleges." > > > > > > Can you check with 4.8.x ? > > > > I guess that statement may not be correct, depending on which kernel subsystem > > exposes the xattr? My testing was with local filesytems, not with nfsv4 > > mounts. Apparantly it works with nfs4_getfacl|nfs4_setfacl... > > Ah, my guess is there's a missing check in the kernel > NFSv4 redirector somewhere. Anyway, we can't use system.XXX > namespace if it doesn't work on local filesystems on > Linux. the good thing is with the new module it's configurable... -slow...

...a remote server from Windows clients through a CIFS share and Linux clients through an NFS export? I have Samba AD working and I believe Winbind is working because when I check permissions from the command line, whether locally on the server or a remote Linux client, with ls, getfacl, getfattr, nfs4_getfacl, or nfs4_getfattr, I can see Samba AD usernames and groups. For example: 1) I set permissions from a remote Windows client on a remote top-level directory (mapped through CIFS to a server share) 2) If on the Windows client, I create subdirectories & files, the inherited permissions ARE th...

...sing this folder and its sub folders to be properly restricted according to ACLs. The NFS4 server is running CentOS 5.7 and is NFS exporting an EXT4 folder. The Samba server is running CentOS 6.0, and Samba 3.5.4-68.el6_0.2. On the Samba server, I am able to use chmod, chown, nfs4_setfacl, ls, and nfs4_getfacl to set and retrieve file and folder permissions and ACLs in the NFS4 mounted folder, and it all seems to be working sanely. I have both servers using winbind. On a Windows 7 machine, I am able to browse to \\test-samba-server, and see all the Samba shared folders that I've set up in smb.conf....

...try and mix them > as you are doing. > Rowland, My understanding is that there are 3 different permission systems: - basic UNIX octal permissions (rwx for owner, group, others) - POSIX ACLs (managed by getfacl/setfacl): http://linux.die.net/man/5/acl - Windows/ZFS/NFSv4 ACLs (managed by nfs4_getfacl/nfs4_setfacl) My understanding is that Samba handles mapping between Windows ACLs and POSIX ACLs, is this not correct? http://www.linuxtopia.org/online_books/network_administration_guides/samba_reference_guide/23_AccessControls_25.html When configuring the ACLs on my share, I have used setfacl e...

Our new-to-us Isilon is handling NFSv4 ACLs differently than other NFS file servers we've had. In particular, something causes an 'O' to pop up in the permission field, but I cannot find any documentation of it. For example, [Linux]$ nfs4_getfacl TODO A::OWNER@:tTcCy A::GROUP@:tcy A::EVERYONE@:rwaxtTnNcy A:O:OWNER@:rwadxtTnNcCoy A:gO:admins at madboa.com:rwadxtTnNcy A:gO:readonly at madboa:rxtnc A:O:EVERYONE@:tncy I'll note that when those 'O' perms get added, our OmniOS (Solaris-alike) hosts cannot read the ACLs: [SunOS]$ ls...

...at we'd like to do: > > Storage is a Netapp (cluster mode CDOT 8.2 I believe), it's NFS exported to our linux system. > > Linux system is CentOS 6 and can NFS mount the Netapp using version 4. NFSv3 doesn't support ACLs with Netapp, but NFSv4 does with the nfs4_setfacl and nfs4_getfacl commands. > > We'd like to share out the NFS mounted volume with samba, and retain the NFSv4 acl capability so that Windows users can set advanced permissions on the files. > > > Is this possible? > > I've seen posts about the ZFS ability and the GPFS ability, b...

...on with NFSv3 + ACLs - due to NFS referrals, automatic mounting of sub-filesystems, etc., I really need it to use NFSv4. > >> > >> Any advice? > > > > How are the NFSv4 ACL exposed to Linux command-line > > tools ? Are there such ? > > Yeah, CentOS 7 has nfs4_getfacl and nfs4_setfacl. Will send example output. OK, what I need is access to the source code of these to see how they're getting programatic access to the ACL data. Given that it shouldn't be too hard to adapt source3/modules/vfs_nfs4acl_xattr.c to use the underlying API these tools use.

...do the same with Samba 4 ? > > Posix-ACLs set on the server with setfacl are recogniced on a > windows-client. But every change I do on a windows-client is not > visible on the posix-side (i.e. not reflected on the fileserver or > on a NFS4-client using getfacl or nfs4_getfacl) > > > Do I make some trivial mistake, is it just the samba4 version used or is > it in general not longer possible/supported to restrict Samba to > Posix-ACLs understood in an ext4-enviroment? Thanks for any hint. > > OS: Ubuntu 14.04 LTS , > Samba: samba 2:4.1.6+dfsg-1ubun...

...regardless of > > priveleges." > > > > Can you check with 4.8.x ? > > I guess that statement may not be correct, depending on which kernel subsystem > exposes the xattr? My testing was with local filesytems, not with nfsv4 > mounts. Apparantly it works with nfs4_getfacl|nfs4_setfacl... Ah, my guess is there's a missing check in the kernel NFSv4 redirector somewhere. Anyway, we can't use system.XXX namespace if it doesn't work on local filesystems on Linux.

...; > > > > > Can you check with 4.8.x ? > > > > > > I guess that statement may not be correct, depending on which kernel subsystem > > > exposes the xattr? My testing was with local filesytems, not with nfsv4 > > > mounts. Apparantly it works with nfs4_getfacl|nfs4_setfacl... > > > > Ah, my guess is there's a missing check in the kernel > > NFSv4 redirector somewhere. Anyway, we can't use system.XXX > > namespace if it doesn't work on local filesystems on > > Linux. > > the good thing is with the new modu...