[gpfsug-discuss] ACL issue with Linux kernel NFSv3

[scale]

Hi Jan,

It could be that the ACL is being overwritten for the directory after it has been created. Another possibility is that the NFSv3 client may not interpret the ACL correctly since NFSv4 ACL is involved. Also, since v3 is used, the Linux kernel NFSv3 server assumes that the filesystem has POSIX ACL. I suggest opening a ticket for this issue with the IBM Scale support team for further investigation.

Thanks,
Anh Dao
From: gpfsug-discuss <gpfsug-discuss-bounces at gpfsug.org> on behalf of Jan Winter <jan at mcwinter.org>
Date: Monday, August 12, 2024 at 4:43 PM
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
Subject: [EXTERNAL] [gpfsug-discuss] ACL issue with Linux kernel NFSv3
Hello,

I'm running a 5.1.9 gpfs cluster on Rocky Linux 8, what we recently
updated from Centos 7.
Since then I notice that ACL inhered permission are not getting applied
to new created directory's via NFS.

As an example, we exporting a space
/path/to/space

This space has posix permission + some extra ACL:

group:some-extra-groups:rwxc:allow:FileInherit:DirInherit
  (X)READ/LIST (X)WRITE/CREATE (X)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL  (X)READ_ATTR  (X)READ_NAMED
  (X)DELETE    (X)DELETE_CHILD (X)CHOWN        (X)EXEC/SEARCH
(X)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED

If I create a new file on the NFS client, the ACL get applied, but when
I create a new directory the ACL are missing.

I didn't had this problem with Centos 7, does anyone here have an idea
what the problem could be, or a way how to debug this issue?

Regards
Jan

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at gpfsug.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20240813/e8db211a/attachment.htm>