We have been using force user/group on our older GPFS cluster for 15+ years. As it only needs to force everything to one user and once group for all samba shares it worked well. Fingers crossed it works as smoothly his time.
>From my experience of changing the ACLS of over 120M files on our existing >system, it only causes a metadata backup change, not the whole file. IF... you do it via the CLI, not via windows. Kindest regards, Paul Paul Ward TS Infrastructure Architect Natural History Museum T: 02079426450 E: [email protected] -----Original Message----- From: gpfsug-discuss <[email protected]> On Behalf Of Jonathan Buzzard Sent: 16 September 2022 22:41 To: [email protected] Subject: Re: [gpfsug-discuss] Supported samba options On 16/09/2022 11:02, Paul Ward wrote: > > Thanks Christof, > > But we are already using 'hosts deny', 'hosts allow' and 'valid users' which > appear to have been implemented. > Is there a document showing what is implemented, rather than just supported. > > If there are supported commands, that replace the three I have mentioned (and > force user/ force group) please let me know. > > We have shares where we want to restrict access to one of more servers, no > password required. > And shares where we want to restrict access to multiple AD users, currently > not specified in AD groups, although that is an option. > In my experience, though this was all many years ago, as I have not run Samba on GPFS for over a decade now (it's about to change as I am in the process of setting up some protocol nodes) the force user, etc. etc. did not work well. The "right" solution is or certainly was to use NFSv4 ACL's and the vfs_gpfs module to make it all work as near as possible to a Windows server. I of course had the realization a couple of days ago that I am going to have to put NFSv4 ACL's on everything in the file system which means backing it all up again :-( JAB. -- Jonathan A. Buzzard Tel: +44141-5483420 HPC System Administrator, ARCHIE-WeSt. University of Strathclyde, John Anderson Building, Glasgow. G4 0NG _______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at gpfsug.org https://eur03.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgpfsug.org%2Fmailman%2Flistinfo%2Fgpfsug-discuss_gpfsug.org&data=05%7C01%7Cp.ward%40nhm.ac.uk%7C5083afebb60c4f3dd9fd08da982c5bfd%7C73a29c014e78437fa0d4c8553e1960c1%7C1%7C0%7C637989613533088822%7CUnknown%7CTWFpbGZsb3d8eyJWIjoiMC4wLjAwMDAiLCJQIjoiV2luMzIiLCJBTiI6Ik1haWwiLCJXVCI6Mn0%3D%7C3000%7C%7C%7C&sdata=XcMoFZmAVNSyNpLS7B2eqS8UiunJTmVMagBEh5lsgTM%3D&reserved=0 _______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at gpfsug.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org
