Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?

Tue, 26 Sep 2017 13:50:02 -0700

The default for the "export ACL" is always to allow access to "Everyone", so that the the "export ACL" does not limit access by default, but only the file system ACL. I do not have systems with these code levels at hand, could you show the difference you see between PTF2 and PTF4?
 
Regards,

Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ
[email protected]  ||  +1-520-799-2469    (T/L: 321-2469)
 
 
----- Original message -----
From: "Sobey, Richard A" <[email protected]>
Sent by: [email protected]
To: gpfsug main discussion list <[email protected]>
Cc: "[email protected]" <[email protected]>
Subject: Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?
Date: Tue, Sep 26, 2017 2:59 AM
 

There isn’t a default ACL being applied to the export at all now, which is fine, but it differs from the behaviour in 4.2.3 PTF2.

 

Thanks

Richard

 

From: [email protected] [mailto:[email protected]] On Behalf Of Sobey, Richard A
Sent: 26 September 2017 09:22
To: gpfsug main discussion list <[email protected]>
Cc: [email protected]
Subject: Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?

 

Hi Christof,  thanks I’ll try it on a test cluster.

 

Richard

 

From: [email protected] [mailto:[email protected]] On Behalf Of Christof Schmitt
Sent: 25 September 2017 22:41
To: [email protected]
Cc: [email protected]
Subject: Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?

 

4.2.3 PTF4 seems to have a fix for this area. Can you try again with that PTF installed?


Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ
[email protected]  ||  +1-520-799-2469    (T/L: 321-2469)

 

 

----- Original message -----
From: "Sobey, Richard A" <[email protected]>
Sent by: [email protected]
To: "[email protected]" <[email protected]>
Cc:
Subject: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?
Date: Mon, Sep 25, 2017 7:35 AM
 

Hi all,

 

This used to work (removing a SID from an ACL), but doesn't any more. Looks like a bug unless I'm being stupid.

 

[root@cesnode~]# mmsmb exportacl list neuroscience2 --viewsids

 

[neuroscience2]

REVISION:1

ACL:S-1-1-0:ALLOWED/FULL

 

 

[root@cesnode ~] mmsmb exportacl remove neuroscience2 --SID S-1-1-0

mmsmb exportacl remove: Incorrect option: --sid

Usage:

mmsmb exportacl remove ExportName {Name | --user UserName | --group GroupName | --system SystemName | --SID SID} [--access Access] [--permissions Permissions] [--viewsddl] [--viewsids] [-h|--help] 

      where:

Access is one of ALLOWED, DENIED 

      Permissions is one of FULL, CHANGE, READ or any combination of RWXDPO

 

I've tried lower case SID i.e --sid, and specifying --access ALLOWED and --permissions FULL.

 

Omitting the --SID argument entirely simply results in GPFS telling me I must specify a Name or an SID.

 

[root@cesnode~]# mmsmb exportacl remove neuroscience2 --access ALLOWED --permissions FULL

[E] The mmsmb exportacl remove command requires a Name or SID.

 

Can anyone see my mistake?

 

Richard

 

 

 

 

 

_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss

Reply via email to