Issue #2657 has been updated by ferney.
Hi, Thank you for interesting you in our problem Yes its a new feature but in bugs@ i have only found submit / bugs items no! ACLs are on NfsV3 or V2 ! in fact there is an implementation of Posix draft acl. see http://wiki.linux-nfs.org/wiki/index.php/ACLs : "Some NFSv2 and v3 implementations support ACLs based on POSIX draft ACLs which depend on a separate rpc program (instead of being part of the NFS protocol itself). " The NFSv4 protocol includes integrated support for ACLs which are similar to those used by Windows. NFSv4 ACLs are richer than POSIX draft ACLs--any POSIX ACL can be represented by an NFSv4 ACL with almost the same semantics, whereas the reverse is not true. " and actualy we use acl on nfsv3 mounts on slaves with a nfsv2/3/4 server. i have read : that hammer have structure to support acls but no marks of shell command or implementations. We found in DragonFly : man 3 acl and man 9 acl but there is not implemented or there isnt the commands getfacl or setfacl like in Freebsd or others linux systems. (FreeBSD: setfacl(1), getfacl(1), acl(3), acl(9)) [i dont know if there is a kernel link with others commands : ( getextattr(8), setextattr(8),extattr(9), lsextattr(8))] Furthermore, i find some old demands in http://leaf.dragonflybsd.org/mailarchive/kernel/2006-07/msg00003.html or http://leaf.dragonflybsd.org/mailarchive/users/2007-02/msg00201.html or http://leaf.dragonflybsd.org/mailarchive/users/2006-03/msg00128.html and i read : https://www.dragonflybsd.org/docs/unknown/Filesystem/ "Files and Directories As has been described, a data object (which can be a file or directory or other filesystem entity) is identified by a data object id, which is effectively its inode, and a 64 bit key field. The key field is typically a base offset for a file or a sortable key for a directory entry. Negative numbers are used for meta-data. For example, -1 will be used for the inode data & stat information. Other negative numbers will be used to support other meta-data such as ACLs." I think now a lot of Files system permit acls and it would be a good idea ;-) if they were supported by dragonFly nfs export. A good idea of what they are acls can be read in http://www.bsdnewsletter.com/bsda-book/View_and_modify_ACLs.html We use this on linux box where we give some rights to users/groups of users on http files to modify web contents because we admin a server farm (100 apaches sites ) on 7-8 linux virtual serveurs. Thanks a lot if u can do something it would be usefull to a lot af users i think! anf finaly, yes if we can we will use nfsv4 server on dragonfly if this exist, but nfsv3 is enough actualy if he has an acl posix implementation. Actualy we use Dragonfly (and hammer ) as nfs export of files which represents Virtual machines disks of kvm virtual servers but We are blocked in our migration by this lack of acls facilities. Bests regards Damien Ferney Le 29/03/2014 10:17, bugtracker-ad...@leaf.dragonflybsd.org a écrit : > Issue #2657 has been updated by ftigeot. > > Category set to Feature request > > This is not really a bug, more like a feature request. > > In order to know what to do, we first have to understand the problem. > > As far as I know, NFS ACLs are a feature of NFSv4. > Are you using NFSv4 with your Linux boxes ? Were you planning to use NFSv4 > with DragonFly ? > > ---------------------------------------- > Bug #2657: Needs acl to migrate our servers > http://bugs.dragonflybsd.org/issues/2657#change-11904 > > * Author: ferney > * Status: New > * Priority: High > * Assignee: > * Category: Feature request > * Target version: > ---------------------------------------- > Hi all, (sry: my first post and i place in submit! sry i resend it ) > im member of MATHRICE (http://www.mathrice.fr & http://math.cnrs.fr) a group > of System manager in mathematics laboratory in france. > We have a lot of computers on 5 cities and would migrate our storage (data, > VM disk... ) on 8 redondants DragonFly servers. > But we have a lot of services of web hosting for our users and > we use actually fACLs > on nfs htdocs directory. > So we have migrate a lot of services but we cant replace our linux servers > cause we need this functionality. > I think that to make hammer an attractive actual file server, it 's a lack to > not have fACLs > or a support of them on nfs share. > > Can you tell me if it could be a priority for you to incorporate this on > Dragonfly > or if we need to maintain 2 files nfs servers in // ? > I think samba need it and it was great to have setfacl / getfacl and support > of fACLs on nfs share. > > We have discuss this with f. Tigeot and he said me to write this first > bugtrackers > Thanks a lot (and sorry for my poor english ;-)) > > Damien Ferney for Mathrice Team > > > -- ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ + Damien FERNEY Tel:04.73.40.70.68 + + Laboratoire de Mathematiques Fax:04.73.40.70.64 + + Université Blaise Pascal (Clermont Ferrand2) + + 24 av. des landais 63177 AUBIERE Cedex + +----------------------------------------------------------------------+ + damien.fer...@univ-bpclermont.fr + ++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++ ---------------------------------------- Bug #2657: Needs acl to migrate our servers http://bugs.dragonflybsd.org/issues/2657#change-11907 * Author: ferney * Status: New * Priority: High * Assignee: * Category: Feature request * Target version: ---------------------------------------- Hi all, (sry: my first post and i place in submit! sry i resend it ) im member of MATHRICE (http://www.mathrice.fr & http://math.cnrs.fr) a group of System manager in mathematics laboratory in france. We have a lot of computers on 5 cities and would migrate our storage (data, VM disk... ) on 8 redondants DragonFly servers. But we have a lot of services of web hosting for our users and we use actually fACLs on nfs htdocs directory. So we have migrate a lot of services but we cant replace our linux servers cause we need this functionality. I think that to make hammer an attractive actual file server, it 's a lack to not have fACLs or a support of them on nfs share. Can you tell me if it could be a priority for you to incorporate this on Dragonfly or if we need to maintain 2 files nfs servers in // ? I think samba need it and it was great to have setfacl / getfacl and support of fACLs on nfs share. We have discuss this with f. Tigeot and he said me to write this first bugtrackers Thanks a lot (and sorry for my poor english ;-)) Damien Ferney for Mathrice Team -- You have received this notification because you have either subscribed to it, or are involved in it. To change your notification preferences, please click here: http://bugs.dragonflybsd.org/my/account