Hello,

I double checked and we have set "chmodandupdateacl" on all our filesets, so that was not the issue for us.

As Scott pointed out, setting options "noacl" on the client fix the issue.

I had already a call open with IBM, but the short answer was that they don't support Linux kernel NFS server. It seems to be that the NFS client negotiates with the server is going wrong. I may reopen the call with IBM to figure out if they are interested to fix this issue or bring in some light why the behaviour have changed.

Thanks for all the help!
Jan

On 13/08/2024 17:32, ScottG wrote:

Hi Jan,
Can you please try to mount the share with the NOACL option.  that should/will resolve the issue.

Scott Goldman

-----Original Message-----
*From*: scale <[email protected] <mailto:scale%20%[email protected]%3e>>
*Reply-To*: gpfsug main discussion list <[email protected] <mailto:gpfsug%20main%20discussion%20list%20%[email protected]%3e>> *To*: gpfsug main discussion list <[email protected] <mailto:gpfsug%20main%20discussion%20list%20%[email protected]%3e>>, Anh Dao <[email protected] <mailto:anh%20dao%20%[email protected]%3e>>
*Subject*: Re: [gpfsug-discuss] ACL issue with Linux kernel NFSv3
*Date*: 08/13/2024 12:24:34 PM

Hi Jan,

It could be that the ACL is being overwritten for the directory after it has been created. Another possibility is that the NFSv3 client may not interpret the ACL correctly since NFSv4 ACL is involved. Also, since v3 is used, the Linux kernel NFSv3 server assumes that the filesystem has POSIX ACL. I suggest opening a ticket for this issue with the IBM Scale support team for further investigation.

Thanks,
Anh Dao

*From:*gpfsug-discuss <[email protected]> on behalf of Jan Winter <[email protected]>
*Date: *Monday, August 12, 2024 at 4:43 PM
*To: *gpfsug main discussion list <[email protected]>
*Subject: *[EXTERNAL] [gpfsug-discuss] ACL issue with Linux kernel NFSv3

Hello,

I'm running a 5.1.9 gpfs cluster on Rocky Linux 8, what we recently
updated from Centos 7.
Since then I notice that ACL inhered permission are not getting applied
to new created directory's via NFS.

As an example, we exporting a space
/path/to/space

This space has posix permission + some extra ACL:

group:some-extra-groups:rwxc:allow:FileInherit:DirInherit
   (X)READ/LIST (X)WRITE/CREATE (X)APPEND/MKDIR (X)SYNCHRONIZE
(X)READ_ACL  (X)READ_ATTR  (X)READ_NAMED
   (X)DELETE    (X)DELETE_CHILD (X)CHOWN        (X)EXEC/SEARCH
(X)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED

If I create a new file on the NFS client, the ACL get applied, but when
I create a new directory the ACL are missing.

I didn't had this problem with Centos 7, does anyone here have an idea
what the problem could be, or a way how to debug this issue?

Regards
Jan

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at gpfsug.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org <http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org>

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at gpfsug.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org <http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org>

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at gpfsug.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at gpfsug.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org

Reply via email to