Re: NFSv4 default ACL

Thank you for your quick reply, Andreas :-)

> Are you sure you are using NFSv4 and not NFSv3?

yes:
10.0.0.2:/vol/vol1 on /data type nfs4 (rw,addr=3D10.0.0.2)

> You might want to create a tcpdump (with -s 0 -w dump) and see what's =

> happening on the wire (e.g., with ethereal). It might be a bug in the
> Linux client, or a problem on the NetApp side.

good idea, I'll do that. =


> In general, POSIX and NFSv4 ACLs do not interact very well. The NFSv4
> patches against libacl which make getfacl and setfacl emulate NFSv4
> ACLs are not in the upstream version, and never will be. Instead,
> we'll likely have tools that can manipulate NFSv4 ACLs directly.
> Apparently Gentoo still took the CITI libacl patches.

is such a client available ? if not, are the CITI patches meant to be
used until something is available ? =


> > Setting default ACL's removes the normal ACL:
> >
> >    joe@server ~ $ setfacl -d -m u:alice:rwx test/
> >    joe@server ~ $ ls -l
> >    total 4
> >    drw xr-xr-x 2 joe Staff 4096 Aug 30 14:13 test
> >    joe@server ~ $ getfacl test
> >    # file: test
> >    # owner: joe
> >    # group: Staff
> >
> >    default:user::rwx
> >    default:user:alice:rwx
> >    default:group::r-x
> >    default:mask::rwx
> >    default:other::r-x
> =

> That's a bug: a file cannot not have an ACL; there should at least be
> user::, group::, and other:: entries.

it's a directory, test/
getfacl always writes # file:


> > Setting Unix permissions removes all ACLs:
> >
> >    joe@server ~ $ chmod 700 test
> >    joe@server ~ $ getfacl test
> >    # file: test
> >    # owner: joe
> >    # group: Staff
> >    user::rwx
> >    group::---
> >    other::---
> >
> >    joe@server ~ $ ls -l
> >    total 4
> >    drwx------ 2 joe Staff 4096 Aug 30 14:13 test
> =

> That's probably by design (but I wouldn't call it expected behavior).

it shouldn't be a problem, I hope when a file is created, umask is
applied and the the default ACL's will be set. And I hope this will
work on NFSv4 as well :)

> > Interesting as well is this behavior:
> >
> >    joe@server ~ $ mkdir test
> >    joe@server ~ $ chmod 700 test
> >    joe@server ~ $ setfacl -m u:alice:rwx test/
> >    joe@server ~ $ setfacl -d -m u:alice:rwx test/
> >    joe@server ~ $ ls -l
> >    total 4
> >    drwx------ 2 joe Staff 4096 Aug 30 14:29 test
> >    joe@server ~ $ getfacl test
> >    # file: test
> >    # owner: joe
> >    # group: Staff
> >
> >    default:user::rwx
> >    default:user:alice:rwx
> >    default:group::---
> >    default:mask::rwx
> >    default:other::---
> >
> >    joe@server ~ $ ls -l
> >    total 4
> >    d--------- 2 joe Staff 4096 Aug 30 14:29 test
> =

> Huh? Getfacl modifies the file mode?

yep... can anyone reproduce this ?

thanks a lot

 Andr=E9

-- =

Andre Roth   | <[email protected]>
GPG: FADF988E| 0959 4D7C F8ED DF4B 90A6  CF71 9EDF 52D1 FADF 988E

_______________________________________________
acl-devel mailing list
[email protected]
http://acl.bestbits.at/mailman/listinfo/acl-devel