[gpfsug-discuss] ACL issue with Linux kernel NFSv3

[Jan Winter]

Hello,

I double checked and we have set "chmodandupdateacl" on all our 
filesets, so that was not the issue for us.

As Scott pointed out, setting options "noacl" on the client fix the issue.

I had already a call open with IBM, but the short answer was that they 
don't support Linux kernel NFS server.
It seems to be that the NFS client negotiates with the server is going 
wrong.
I may reopen the call with IBM to figure out if they are interested to 
fix this issue or bring in some light why the behaviour have changed.

Thanks for all the help!
Jan

On 13/08/2024 17:32, ScottG wrote:
> 
> Hi Jan,
> Can you please try to mount the share with the NOACL option.  that 
> should/will resolve the issue.
> 
> Scott Goldman
> 
> -----Original Message-----
> *From*: scale <scale at us.ibm.com <mailto:scale%20%3cscale at us.ibm.com%3e>>
> *Reply-To*: gpfsug main discussion list <gpfsug-discuss at gpfsug.org 
> <mailto:gpfsug%20main%20discussion%20list%20%3cgpfsug-discuss at gpfsug.org%3e>>
> *To*: gpfsug main discussion list <gpfsug-discuss at gpfsug.org 
> <mailto:gpfsug%20main%20discussion%20list%20%3cgpfsug-discuss at gpfsug.org%3e>>, Anh Dao <adao at ibm.com <mailto:Anh%20Dao%20%3cadao at ibm.com%3e>>
> *Subject*: Re: [gpfsug-discuss] ACL issue with Linux kernel NFSv3
> *Date*: 08/13/2024 12:24:34 PM
> 
> Hi Jan,
> 
> It could be that the ACL is being overwritten for the directory after it 
> has been created. Another possibility is that the NFSv3 client may not 
> interpret the ACL correctly since NFSv4 ACL is involved. Also, since v3 
> is used, the Linux kernel NFSv3 server assumes that the filesystem has 
> POSIX ACL. I suggest opening a ticket for this issue with the IBM Scale 
> support team for further investigation.
> 
> Thanks,
> Anh Dao
> 
> *From:*gpfsug-discuss <gpfsug-discuss-bounces at gpfsug.org> on behalf of 
> Jan Winter <jan at mcwinter.org>
> *Date: *Monday, August 12, 2024 at 4:43 PM
> *To: *gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
> *Subject: *[EXTERNAL] [gpfsug-discuss] ACL issue with Linux kernel NFSv3
> 
> Hello,
> 
> I'm running a 5.1.9 gpfs cluster on Rocky Linux 8, what we recently
> updated from Centos 7.
> Since then I notice that ACL inhered permission are not getting applied
> to new created directory's via NFS.
> 
> As an example, we exporting a space
> /path/to/space
> 
> This space has posix permission + some extra ACL:
> 
> group:some-extra-groups:rwxc:allow:FileInherit:DirInherit
>    (X)READ/LIST (X)WRITE/CREATE (X)APPEND/MKDIR (X)SYNCHRONIZE
> (X)READ_ACL  (X)READ_ATTR  (X)READ_NAMED
>    (X)DELETE    (X)DELETE_CHILD (X)CHOWN        (X)EXEC/SEARCH
> (X)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED
> 
> If I create a new file on the NFS client, the ACL get applied, but when
> I create a new directory the ACL are missing.
> 
> I didn't had this problem with Centos 7, does anyone here have an idea
> what the problem could be, or a way how to debug this issue?
> 
> Regards
> Jan
> 
> _______________________________________________
> gpfsug-discuss mailing list
> gpfsug-discuss at gpfsug.org
> http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org 
> <http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org>
> 
> _______________________________________________
> gpfsug-discuss mailing list
> gpfsug-discuss at gpfsug.org
> http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org 
> <http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org>
> 
> _______________________________________________
> gpfsug-discuss mailing list
> gpfsug-discuss at gpfsug.org
> http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org