Problems with ACL over NFS
George Montana Harkin <[email protected]> Thu, 27 Apr 2006 17:06:18 -0700
| Newsgroups | gmane.linux.file-systems.acl.devel |
|---|---|
| Message-ID | <[email protected]> |
Hello, We seem to be having some issues with ACL's over NFS. When running a batch script to update permissions on a directory, some of the acls specified are not applied at all. Usualy only the last specified ACL is set, and the rest are ignored. The same behavior occurs regardless of issuing only one setfacl command for all the acl entries or one setfacl command per acl entry. If we put a delay in the acl script between the running of the list of setfacl commands, the ACLs seem to be set correctly. We are running Kernel 2.6.16 on Debian. ACLs are enabled in the kernel. ACLs work correctly when set individually. Only in large batch processing does the setfacl command not work. In addition, the setfacl command does not return as failed. We have tried setting the nfs mount options: sync and tcp to no avail. We have also tried utilizing a different nfs server with the same results. Here is an example of the commands being run sequentially: setfacl --set user::rwx,user:www-data:r-x,g::rwx,o:-,d:user::rwx,d:g::rwx,d:o:-,d:user:www-data:r-x /wwwdev/httpd-docs/testo/. setfacl -m user:mccammos:rwx /wwwdev/httpd-docs/testo/. setfacl -m d:user:mccammos:rwx /wwwdev/httpd-docs/testo/. setfacl -m user:brocks:rwx /wwwdev/httpd-docs/testo/. setfacl -m d:user:brocks:rwx /wwwdev/httpd-docs/testo/. setfacl -m user:reaneyk:rwx /wwwdev/httpd-docs/testo/. setfacl -m d:user:reaneyk:rwx /wwwdev/httpd-docs/testo/. ... setfacl -m user:knodlew:rwx /wwwdev/httpd-docs/testo/. setfacl -m d:user:knodlew:rwx /wwwdev/httpd-docs/testo/. setfacl -m user:harrikat:rwx /wwwdev/httpd-docs/testo/. setfacl -m d:user:harrikat:rwx /wwwdev/httpd-docs/testo/. setfacl -m user:faabergr:rwx /wwwdev/httpd-docs/testo/. setfacl -m d:user:faabergr:rwx /wwwdev/httpd-docs/testo/. This will set a default acl for user faabergr with rwx permissions, all others are ignored. Another oddity is with the -b command Running: setfacl -b /wwwdev/httpd-docs/testo/. Only removes the standard acls, and not the default acls. Any help would be appreciated. George Harkin [email protected] -- George Montana Harkin Web Application Developer Central Web Servies, Media Services Oregon State University (541) 737-1335 _______________________________________________ acl-devel mailing list [email protected] http://acl.bestbits.at/mailman/listinfo/acl-devel