NFSv4 default ACL

Hello,

I'm having some problems using ACL's on a mounted NFSv4 directory.
Setting simple ACL's works fine, but default ACL's conflict with normal
ACLs and the Unix permissions.
I don't know if default ACLs are possible with NFSv4 ACLs, if this is a
bug or a configuration issue. The NFSv4 server is a NetApp Filer.

Setting simple ACLs works fine:

   joe@server ~ $ mkdir test
   joe@server ~ $ getfacl test
   # file: test
   # owner: joe
   # group: Staff
   user::rwx
   group::r-x
   other::r-x

   joe@server ~ $ setfacl -m u:alice:rwx test/
   joe@server ~ $ getfacl test
   # file: test
   # owner: joe
   # group: Staff
   user::rwx
   user:alice:rwx
   group::r-x
   mask::rwx
   other::r-x

Setting default ACL's removes the normal ACL:

   joe@server ~ $ setfacl -d -m u:alice:rwx test/
   joe@server ~ $ ls -l
   total 4
   drw xr-xr-x 2 joe Staff 4096 Aug 30 14:13 test
   joe@server ~ $ getfacl test
   # file: test
   # owner: joe
   # group: Staff
 =

   default:user::rwx
   default:user:alice:rwx
   default:group::r-x
   default:mask::rwx
   default:other::r-x

Setting Unix permissions removes all ACLs:

   joe@server ~ $ chmod 700 test
   joe@server ~ $ getfacl test
   # file: test
   # owner: joe
   # group: Staff
   user::rwx
   group::---
   other::---

   joe@server ~ $ ls -l
   total 4
   drwx------ 2 joe Staff 4096 Aug 30 14:13 test

Trying to set default ACLs again:

   joe@server ~ $ setfacl -d -m u:alice:rwx test/
   joe@server ~ $ ls -l
   total 4
   drwx------ 2 joe Staff 4096 Aug 30 14:13 test
   joe@server ~ $ getfacl test
   # file: test
   # owner: joe
   # group: Staff

   default:user::rwx
   default:user:alice:rwx
   default:group::---
   default:mask::rwx
   default:other::---

After this, I cannot set ACLs anymore:

   joe@server ~ $ setfacl -m u:alice:rwx test/
   setfacl: test: Malformed access ACL `user:alice:rwx,mask::rwx':
                        Missing or wrong entry at entry 1 =

   joe@server ~ $ getfacl test
   # file: test
   # owner: joe
   # group: Staff

   default:user::rwx
   default:user:alice:rwx
   default:group::---
   default:mask::rwx
   default:other::---

Interesting as well is this behavior:

   joe@server ~ $ mkdir test
   joe@server ~ $ chmod 700 test
   joe@server ~ $ setfacl -m u:alice:rwx test/
   joe@server ~ $ setfacl -d -m u:alice:rwx test/
   joe@server ~ $ ls -l
   total 4
   drwx------ 2 joe Staff 4096 Aug 30 14:29 test
   joe@server ~ $ getfa
   getfacl   getfattr
   joe@server ~ $ getfacl test
   # file: test
   # owner: joe
   # group: Staff

   default:user::rwx
   default:user:alice:rwx
   default:group::---
   default:mask::rwx
   default:other::---

   joe@server ~ $ ls -l
   total 4
   d--------- 2 joe Staff 4096 Aug 30 14:29 test


Can anyone point me in the right direction ?
The client is a gentoo with a 2.6.16 kernel, acl version is 2.2.32

All those ACL operations work well on the same system on a reiserfs
partition. Seems to be a NFSv4 issue.

Thanks for your help !

Regards

Andr=E9 Roth


-- =

Andre Roth   | <[email protected]>
GPG: FADF988E| 0959 4D7C F8ED DF4B 90A6  CF71 9EDF 52D1 FADF 988E

_______________________________________________
acl-devel mailing list
[email protected]
http://acl.bestbits.at/mailman/listinfo/acl-devel