zfs discuss - Feb 2009 - ZFS Sharing over smb - permissions/access

Hello, 
I have setup a fileserver using zfs and am able to see the share from my mac.  I
am able to create/write to the share as well as read.  I''ve ensured
that I have the same user and uid on both the server (opensolaris snv101b) as
well as the mac.  The root folder of the share is owned by root:mygroup.

When I write/create new files on the share, they get created, but the
permissions are such:

---------- 1 aaron staff    14453522 2009-01-03 15:41 myFile.txt

aaron:staff is the user on the mac (leopard).  When I mounted the share, I used
aaron as the user.

What I really would like is for this share to have newly written/created files
be owned by root:mygroup.

I attempted setting ACLs by various options that I used did not yield the
correct result (even attempting to have everyone with full access).

Is there something simple I''m missing (I hope)?

Thanks!  If there is any other information that I am not providing, please let
me know.  I do not have an smb.conf on the server that  can see - all sharing is
done through zfs sharesmb.

Aaron
-- 
This message posted from opensolaris.org

Aaron wrote:
> I have setup a fileserver using zfs and am able to see the share from my
mac.
 > I am able to create/write to the share as well as read.  I''ve
ensured
that I
 > have the same user and uid on both the server (opensolaris snv101b) 
as well
 > as the mac.  The root folder of the share is owned by
root:mygroup.
> 
> When I write/create new files on the share, they get created, but the
permissions
 > are such:
> 
> ---------- 1 aaron staff    14453522 2009-01-03 15:41 myFile.txt
> 
> aaron:staff is the user on the mac (leopard).  When I mounted the share, I
 > used aaron as the user.
> 
> What I really would like is for this share to have newly written/created
 > files be owned by root:mygroup.

This is a limitation on the part of the Mac ''smbfs'' client. 
We
use the same code base on Solaris.  The code is not currently
able to do I/O on the part of multiple users; the user who was
authenticated at mount time owns all of the files.  Also, the
Mac client does not try to parse ACLs at all, so permission
mode bits and reported ownership are guesses done at the client.
If you set ACLs on the server, they should be enforced, even if
you can''t see that from the Mac.  If the ownership or perm bits
are in your way on the Mac, you can use smbfs mount options to
get it to tell you different things, but there''s no way to see
the truth until more code is written.

Rob T

Ok, thanks for the info - I was really puling my hair out over this.  Would you
know if sharing over nfs via zfs would fare any better?
-- 
This message posted from opensolaris.org

Aaron wrote:
> Ok, thanks for the info - I was really puling my hair out over this.  Would
you know if sharing over nfs via zfs would fare any better?
I am *quite* happy with the Mac NFS client, and use it against ZFS
files all the time.  It''s worth the time to make sure you''re
using
the same numeric UIDs on both the client and server if you''re using
the default authentication settings.

Rob T

Just tired sharing over nfs and [i]much[/i] improved experience.  I''ll
wait and see if performance becomes an issue, but this looks prety good now. 
The key being as you mentioned, keeping the uid/gids in sync.

Thanks!

Aaron
-- 
This message posted from opensolaris.org