Hi, is anyone working on ZFS ACL support in Samba? Currently I have to disable ACL support in samba. Otherwise I get "permission denied" error messages trying to synchronize my offline folders residing on a Samba server (now on ZFS). Daniel
ZFS/NFSv4 introduced a new acl model (see acl(2) ...nevada (OpenSolaris) Solaris10u2). There is no compatibility bridge between the GETACL/SETACL/GETACLCNT and ACE_SETACL/ACE_SETACL/ACE_GETACLCNT fonctions of acl(2) syscall. Because this is Solaris speciffic (samba.org defines its internal acl handling based on posix acls) problem Sun is working on support of the Samba on ZFS/NFSv4 volumes. This message posted from opensolaris.org
IBM has contributed code for NFSv4 ACLs under AIX''s JFS; hopefully Sun will not tarry in following their lead for ZFS. http://lists.samba.org/archive/samba-cvs/2006-September/070855.html This message posted from opensolaris.org
On Oct 25, 2006, at 15:38, Roger Ripley wrote:> IBM has contributed code for NFSv4 ACLs under AIX''s JFS; hopefully > Sun will not tarry in following their lead for ZFS. > > http://lists.samba.org/archive/samba-cvs/2006-September/070855.htmlI thought this was still in draft: http://ietf.org/internet-drafts/draft-ietf-nfsv4-acl-mapping-05.txt .je
On Wed, Jonathan Edwards wrote:> > On Oct 25, 2006, at 15:38, Roger Ripley wrote: > > >IBM has contributed code for NFSv4 ACLs under AIX''s JFS; hopefully > >Sun will not tarry in following their lead for ZFS. > > > >http://lists.samba.org/archive/samba-cvs/2006-September/070855.html > > I thought this was still in draft: > http://ietf.org/internet-drafts/draft-ietf-nfsv4-acl-mapping-05.txtThat I-D describes the Posix/NFSv4 mapping that can be done. NFSv4 ACLs to/from Samba/NT ACLs are a different story; no interdependency. Spencer
Spencer Shepler <spencer.shepler at sun.com> wrote:> On Wed, Jonathan Edwards wrote: > > > > On Oct 25, 2006, at 15:38, Roger Ripley wrote: > > > > >IBM has contributed code for NFSv4 ACLs under AIX''s JFS; hopefully > > >Sun will not tarry in following their lead for ZFS. > > > > > >http://lists.samba.org/archive/samba-cvs/2006-September/070855.html > > > > I thought this was still in draft: > > http://ietf.org/internet-drafts/draft-ietf-nfsv4-acl-mapping-05.txt > > That I-D describes the Posix/NFSv4 mapping that can be done. > > NFSv4 ACLs to/from Samba/NT ACLs are a different story; no interdependency.VFSv4 ACLs are bitwise identical to WIN-NT ACLs, could you please explain why there is a difference for Samba? J?rg -- EMail:joerg at schily.isdn.cs.tu-berlin.de (home) J?rg Schilling D-13353 Berlin js at cs.tu-berlin.de (uni) schilling at fokus.fraunhofer.de (work) Blog: http://schily.blogspot.com/ URL: http://cdrecord.berlios.de/old/private/ ftp://ftp.berlios.de/pub/schily
On Thu, Joerg Schilling wrote:> Spencer Shepler <spencer.shepler at sun.com> wrote: > > > On Wed, Jonathan Edwards wrote: > > > > > > On Oct 25, 2006, at 15:38, Roger Ripley wrote: > > > > > > >IBM has contributed code for NFSv4 ACLs under AIX''s JFS; hopefully > > > >Sun will not tarry in following their lead for ZFS. > > > > > > > >http://lists.samba.org/archive/samba-cvs/2006-September/070855.html > > > > > > I thought this was still in draft: > > > http://ietf.org/internet-drafts/draft-ietf-nfsv4-acl-mapping-05.txt > > > > That I-D describes the Posix/NFSv4 mapping that can be done. > > > > NFSv4 ACLs to/from Samba/NT ACLs are a different story; no interdependency. > > VFSv4 ACLs are bitwise identical to WIN-NT ACLs, could you please explain > why there is a difference for Samba?One known difference between NFSv4 ACLs and NT ACLs is information about how ACEs were populated via inheritance. There is a proposal in the NFSv4 WG at the moment to add this functionality to NFSv4.1. Spencer