I wrote such a tool about a decade ago. It is still around on any Scale node where the GUI is installed. Look for /usr/lpp/mmfs/gui/cli/chacl and lsacl respectively. Those command lines are technically unsupported, but since the ReST API is built on top of them you should be able to reproduce any bug via ReST (which is fully supported).
The ReST API itself is also a good choice whenever you want to automate changing of ACLs.
Mit freundlichen Grüßen / Kind regards
| |
|
IBM Deutschland Research & Development GmbH / Vorsitzende des Aufsichtsrats: Gregor Pillen / Geschäftsführung: Dirk Wittkopp
Sitz der Gesellschaft: Böblingen / Registergericht: Amtsgericht Stuttgart, HRB 243294
----- Original message -----
From: "Olaf Weiser" <[email protected]>
Sent by: [email protected]
To: [email protected]
Cc: [email protected]
Subject: [EXTERNAL] Re: [gpfsug-discuss] Using setfacl vs. mmputacl
Date: Mon, Mar 1, 2021 18:57
[...] that you would do this over NFSv4 or Samba.[...]I know this statement and I've been told the same many times for my projects I did...I can't promise anything , nor am I able to rate .. if it is worth or not..all I'm saying... I saw/see a need for setfacl directly on GPFS in multiple projects..so if that items is interesting for many people.. why not give it a try in 2021 ... knowing, that really developing such a tool is a lot of discussion and in the end it will most likely become a better "compromise"... But maybe this "compromise" could then be the very best solution we'll ever get ..P.S.hey - at least the last 2 digit's of the year has turned around ;-) since you opened up this itemcheersolaf----- Original message -----
From: Jonathan Buzzard <[email protected]>
Sent by: [email protected]
To: [email protected]
Cc:
Subject: [EXTERNAL] Re: [gpfsug-discuss] Using setfacl vs. mmputacl
Date: Mon, Mar 1, 2021 5:51 PM
On 01/03/2021 15:18, Olaf Weiser wrote:
> CAUTION: This email originated outside the University. Check before
> clicking links or attachments.
> JAB,
> yes-this is in argument ;-) ... and personally I like the idea of having
> smth like setfacl also for GPFS .. for years...
> *but* it would not take away the generic challenge , what to do, if
> there are competing standards / definitions to meet
> at least that is most likely just one reason, why there's no tool yet
> there are several hits on RFE page for "ACL".. some of them could be
> also addressed with a (mm)setfacl tool
> but I was not able to find a request for a tool itself
> (I quickly searched public but not found it there, maybe there is
> already one in private...)
> So - dependent on how important this item for others is ... its time
> to fire an RFE ?!? ...
Well when I asked I was told by an IBM representative that it was by
design there was no proper way to set ACLs directly from Linux. The
expectation was that you would do this over NFSv4 or Samba.
So filing an RFE would be pointless under those conditions and I have
never bothered as a result. This was pre 2012 so IBM's outlook might
have changed in the meantime.
JAB.
--
Jonathan A. Buzzard Tel: +44141-5483420
HPC System Administrator, ARCHIE-WeSt.
University of Strathclyde, John Anderson Building, Glasgow. G4 0NG
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwIGaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=QInBVUG2345zpTXGAPvczeXAfnCgUNXuJEI_-wZlDDs&m=rIGzfsaZeHVJsB7f40z3Rq08gAVzunl8HAjTQUJeAsY&s=f-ToxCe0HJVrknlsf5YGm6ZZPFJn_W5Xp1emUpG2VJ0&e=
_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=Ca33Jr06KzzO4hjuWcM4iQ5J_E1MZR_xSRWwuh6yfsw&m=UJ_QwWnZfB-5nreEUjbDULnnwUj0eKUwyNOA6o_X-4o&s=QcNyW3fQWNeDt6IXDLzt_5hTk1dPN1M6WcJC6--5rZs&e=
_______________________________________________ gpfsug-discuss mailing list gpfsug-discuss at spectrumscale.org http://gpfsug.org/mailman/listinfo/gpfsug-discuss
