Re: [CentOS] Tools/mechanisms for the management of access permissions in big filebased datasets

2018-11-28 Thread Paul Heinlein
On Wed, 28 Nov 2018, Warren Young wrote: Who here uses ACLs to good effect? Are you using more than just getfacl/setfacl to do it? We use NFSv4 ACLs on Lustre and Isilon filesystems, so we employ nfs4_getfacl and nfs4_setfacl -- but all of our work is done on the command line, not via a

Re: [CentOS] Tools/mechanisms for the management of access permissions in big filebased datasets

2018-11-28 Thread Warren Young
On Nov 28, 2018, at 2:36 AM, Frank Thommen wrote: > > Our problem is more the management side. Effectively we are looking for a > tool that helps us manage these permissions I want ACLs to work. There’s a real problem to solve, which is that the old user:group rwx Unix permission system

Re: [CentOS] Tools/mechanisms for the management of access permissions in big filebased datasets

2018-11-28 Thread Frank Thommen
Thank you. Basically our problem are not the ACLs or their support per se, but that we have to manage a huge number of individual ACLS (several hundred users in more than hundred projects) in multi-petabyte filesystem and still have to keep overview and control. Our problem is more the

[CentOS] Tools/mechanisms for the management of access permissions in big filebased datasets

2018-11-27 Thread Leroy Tennison
Well, there are extended ACLs if they're available in CentOS, when I first worked with them (long ago) they were new (and on a different Distro). I hope support for them has improved. They allow multiple users/groups to be assigned permissions to a file/directory. The problem then was that

[CentOS] Tools/mechanisms for the management of access permissions in big filebased datasets

2018-11-27 Thread Frank Thommen
Hello, we are currently managing access permissions through classical user-group-others permissions on a multi-petabyte directory tree with partially very deep and broad directories. Projects are represented by directory trees and mapped through GIDs. Lately we had lots of "singular"