Chris Gerhard wrote:
SYSTEM (aka "Local System", S-1-5-18) is hardwired to 2147483648. It's not exactly an ephemeral ID; it's more of a reserved ID. I think this is so that something in the CIFS server can automatically add it to an ACL in some cases, but I don't know the details.

So can you map this ID ? If so how?

No.  Hardwired mappings win over everything else.

[ NFS failure retrieving ACL on files with SYSTEM in the ACL ]
This appears to be a bug. ls gets an error from the call to get the ACL and then misbehaves:

http://bugs.opensolaris.org/bugdatabase/view_bug.do?bug_id=6844328

Hmm. I'm not an expert on NFS and wouldn't immediately know where to look in the code to check, but my tentative bet is that NFS thinks the hardwired ID 2147483648 is an ephemeral ID (because it's in the ephemeral range) and is upset about the idea of passing an ephemeral ID across the wire.

so having this default SYSTEM group which is unmapped is preventing NFS access working.

It isn't exactly unmapped.  It's unconditionally mapped to 2147483648.

I'll need to talk to the CIFS experts about this.
_______________________________________________
cifs-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/cifs-discuss

Reply via email to