similar to: Does control of NFS4 ACL's from NetApps work for RHEL Samba servers with Windows XP clients at all?

Good morning, folks. I'm involved in a project to enforce NFSv4 ACL's across a variety of storage platforms, in particular NetApps sharing NFS. That works fiine with the NetApp NFS qtrees, but we'd like to share those with CIFS clients as well. This works, and restricts access the way we expect NFSv4 ACL's to work, but the Windows clients cannot view any of the security settings

I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where I'm confident in the answer, so I figure I'd just ask again here if that's ok. Here's what we have, and what we'd like to do: Storage is a Netapp (cluster mode CDOT 8.2 I believe), it's NFS exported to our linux system. Linux system is CentOS 6 and can NFS mount the

Am 20.03.2015 um 10:45 schrieb Volker Lendecke: > On Thu, Mar 19, 2015 at 05:47:11PM +0100, Robert Schetterer wrote: >>> Well the API is propably just stuffing blobs into extended >>> attributes directly from userspace. That's how most of >>> the NFSv4 ACLs usually get done :-(. >>> >>> Of course all implementations use different blobs containing

> Date: Thu, 19 Mar 2015 11:59:47 +0100 > From: Volker.Lendecke at SerNet.DE > To: groucho.64738 at hotmail.com > CC: samba at lists.samba.org > Subject: Re: [Samba] NFS4 ACLs with samba 3 (or 4) > > On Wed, Mar 18, 2015 at 01:17:34PM -0400, Kevin Taylor wrote: > > I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where

> Date: Thu, 19 Mar 2015 11:59:47 +0100 > From: Volker.Lendecke at SerNet.DE > To: groucho.64738 at hotmail.com > CC: samba at lists.samba.org > Subject: Re: [Samba] NFS4 ACLs with samba 3 (or 4) > > On Wed, Mar 18, 2015 at 01:17:34PM -0400, Kevin Taylor wrote: > > I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where

Am 19.03.2015 um 17:39 schrieb Jeremy Allison: > On Thu, Mar 19, 2015 at 10:16:20AM -0400, Kevin Taylor wrote: > >> Unfortunately I'm not a programmer, so I don't know if there is an API or not. As far as me the user can tell is that we have an NFSv4 filesystem mounted on the linux box. We have tools available through the nfs4-acl-tools package (this is on CentOS 6, for

Hi, I am looking for a method of syncing NFS directories (Netapp qtrees) that contains NFSv4 ACLs. We copy qtrees (millions of files, xx TB) from one qutree into another one. The only tool we currently use is (netapp internal) ndmpcopy, it preserves ACLs but is slow. Netapp "xcopy" tool is also not aware of NFSv4 ACLs. rsync that is aware of NFSV4 ACLs would be a smart solution for

Is idmapd supposed to work where users have different uid numbers on the nfsv4 server and client? It seems to show the right names for ownership on the client side, but if I automount a home directory, that user doesn't have permission to enter it, and if I change permission to allow access and create a new file, it shows on the server as owned by the uid number for the user on the client

Greetings Dovecot List, I have a bit of an edge case I am trying to resolve. I am currently using dovecot on Ubuntu 14.04 - Ubuntu package version: 1:2.2.9-1ubuntu2.3 I have attached the output of doveconf -n to this email - but to describe the configuration in a nutshell: my server is configured to use Maildir storage I do not use dovecot delivery service (there is a separate

Hi, Did anyone here tried to use rsync between a unix machine and a NetApps Vfiler volume? I have strange case where it does create the folders on the vfiler volume but does not copy the files. Command is something like this: rsync -va dropzone pushacc@prod:/launchpad where, * dropzone is the the folder which keeps source files and folders in unix. This folder is owned by a unix account

On Wed, Mar 18, 2015 at 01:17:34PM -0400, Kevin Taylor wrote: > I know this was discussed a lot a few years ago, but my google searches aren't quite getting me where I'm confident in the answer, so I figure I'd just ask again here if that's ok. > > Here's what we have, and what we'd like to do: > > Storage is a Netapp (cluster mode CDOT 8.2 I believe),

Hi, For anyone who is interested; I created some basic scripts based on my current iSCSI block script. http://kinkrsoftware.nl/contrib/xen/block-netapp http://kinkrsoftware.nl/contrib/xen/netapp-lun.py Basically these two scripts allow you to start a vfiler with a qtree of customers. You log in the NetApp upon boot, and can use: netapp://customer1/disk1 It is work in progress... because I

Hi, For anyone who is interested; I created some basic scripts based on my current iSCSI block script. http://kinkrsoftware.nl/contrib/xen/block-netapp http://kinkrsoftware.nl/contrib/xen/netapp-lun.py Basically these two scripts allow you to start a vfiler with a qtree of customers. You log in the NetApp upon boot, and can use: netapp://customer1/disk1 It is work in progress... because I

I'm newbies in SAMBA and NetApp filer , I use Filer with OpenLDAP as an authentication and authorization server , but look like NetApp doesn't work properly ( can't authentication ) , NetApp engineer suggest me that NetApp work properly with pure ActiveDirectory Environment. not SAMBA + OpenLDAP backend like me have. so I solve this problem by make Samba as native PDC and use

Hello, with windows 7 as client there's an oddity, when navigating with the windows 7 explorer into a directory, that is protected with ACLs on the Unix side: Though it should be possible to access the directory by ACLs (while the traditional basic Unix permissions deny it), the windows 7 "explorer" says: no access rights ... The accessed directory is an NFS4 or 3 mounted export

Hi everyone We're really struggling with nfs4 <--> windows acls. Scenario Samba4 share --> cifs --> win7. No problem Samba4 share --> nfs4 --> Linux. acls not inherited Neither is there inheritance vica versa. e.g. It is not possible to create files with group rw on a umask 0022 nfs4 share. nfs4_setfacl cannot override umask. Using POSIX or windows acls this works

On Thu, Mar 19, 2015 at 05:47:11PM +0100, Robert Schetterer wrote: > > Well the API is propably just stuffing blobs into extended > > attributes directly from userspace. That's how most of > > the NFSv4 ACLs usually get done :-(. > > > > Of course all implementations use different blobs containing > > different things to do the same thing :-). > >

Hi, does klibc's mount support nfs4? Any ideas how hard is it to get nfs4-utils build against klibc for encryption support? Julius

I am looking for where zfsacl settings such as, zfsacl: acesort = dontcare , are documented. Do I need NFS settings such as, nfs4: mode = simple , if I am not using NFS? If I do, where are they documented? Thanks

Hi, Thank you for you input! We tried that already. That, however, doesn't do the same thing. It is then simply a DFS server and not the "magical" msdfs proxy - yes the user can now click on a link to get to the desired spot, but the proxy function _automagically_ sends the user, when they access the msdfs share, to the netapp's readonly share without the extra click. And it