I’m sorry, you’re right. I can only assume my brain was looking for an SID 
entry so when I saw Everyone:ALLOWED/FULL it didn’t process it at all.

4.2.3-4:
[root@cesnode ~]# mmsmb exportacl list

[testces]
ACL:\Everyone:ALLOWED/FULL

From: [email protected] 
[mailto:[email protected]] On Behalf Of Christof Schmitt
Sent: 26 September 2017 21:49
To: [email protected]
Subject: Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?

The default for the "export ACL" is always to allow access to "Everyone", so 
that the the "export ACL" does not limit access by default, but only the file 
system ACL. I do not have systems with these code levels at hand, could you 
show the difference you see between PTF2 and PTF4?

Regards,

Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ
[email protected]<mailto:[email protected]>  ||  
+1-520-799-2469    (T/L: 321-2469)


----- Original message -----
From: "Sobey, Richard A" <[email protected]<mailto:[email protected]>>
Sent by: 
[email protected]<mailto:[email protected]>
To: gpfsug main discussion list 
<[email protected]<mailto:[email protected]>>
Cc: "[email protected]<mailto:[email protected]>" 
<[email protected]<mailto:[email protected]>>
Subject: Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?
Date: Tue, Sep 26, 2017 2:59 AM


There isn’t a default ACL being applied to the export at all now, which is 
fine, but it differs from the behaviour in 4.2.3 PTF2.



Thanks

Richard



From: 
[email protected]<mailto:[email protected]>
 [mailto:[email protected]] On Behalf Of Sobey, Richard A
Sent: 26 September 2017 09:22
To: gpfsug main discussion list 
<[email protected]<mailto:[email protected]>>
Cc: [email protected]<mailto:[email protected]>
Subject: Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?



Hi Christof,  thanks I’ll try it on a test cluster.



Richard



From: 
[email protected]<mailto:[email protected]>
 [mailto:[email protected]] On Behalf Of Christof Schmitt
Sent: 25 September 2017 22:41
To: [email protected]<mailto:[email protected]>
Cc: [email protected]<mailto:[email protected]>
Subject: Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?



4.2.3 PTF4 seems to have a fix for this area. Can you try again with that PTF 
installed?

Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ
[email protected]<mailto:[email protected]>  ||  
+1-520-799-2469    (T/L: 321-2469)





----- Original message -----
From: "Sobey, Richard A" <[email protected]<mailto:[email protected]>>
Sent by: 
[email protected]<mailto:[email protected]>
To: "[email protected]<mailto:[email protected]>" 
<[email protected]<mailto:[email protected]>>
Cc:
Subject: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?
Date: Mon, Sep 25, 2017 7:35 AM


Hi all,



This used to work (removing a SID from an ACL), but doesn't any more. Looks 
like a bug unless I'm being stupid.



[root@cesnode<file:///root@c>~]# mmsmb exportacl list neuroscience2 --viewsids



[neuroscience2]

REVISION:1

ACL:S-1-1-0:ALLOWED/FULL





[root@cesnode<file:///root@ce> ~] mmsmb exportacl remove neuroscience2 --SID 
S-1-1-0

mmsmb exportacl remove: Incorrect option: --sid

Usage:

mmsmb exportacl remove ExportName {Name | --user UserName | --group GroupName | 
--system SystemName | --SID SID} [--access Access] [--permissions Permissions] 
[--viewsddl] [--viewsids] [-h|--help]

      where:

Access is one of ALLOWED, DENIED

      Permissions is one of FULL, CHANGE, READ or any combination of RWXDPO



I've tried lower case SID i.e --sid, and specifying --access ALLOWED and 
--permissions FULL.



Omitting the --SID argument entirely simply results in GPFS telling me I must 
specify a Name or an SID.



[root@cesnode<file:///root@c>~]# mmsmb exportacl remove neuroscience2 --access 
ALLOWED --permissions FULL

[E] The mmsmb exportacl remove command requires a Name or SID.



Can anyone see my mistake?



Richard





_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=5Nn7eUPeYe291x8f39jKybESLKv_W_XtkTkS8fTR-NI&m=c3uTUNFbPTWWcTNUNVVejlQ0xdnhBAfQdouTBlVgnjc&s=hsWeRhH-BhTEaAlrTPbJGlwCV-5Ui7t03Zcec9kywOA&e=




_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=5Nn7eUPeYe291x8f39jKybESLKv_W_XtkTkS8fTR-NI&m=B-AqKIRCmLBzoWAhGn7NY-ZASOX25NuP_c_ndE8gy4A&s=S06OD3mbRedYjfwETO8tUnlOjnWT7pOX8nsYX5ebIdA&e=


_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss

Reply via email to