Re: [gpfsug-discuss] Limiting CES SMB shares to specific subnets

2021-02-09 Thread Christof Schmitt
> Project SMB shares have export ACLs (as in "mmsmb exportacl ..")> limiting share access to the project's member group, in addition to the> NFSv4 ACLs.>> We also want to limit access to SMB shares to project subnets.> There is no way to specify that with "mmsmb", but we have found>>  

[gpfsug-discuss] Limiting CES SMB shares to specific subnets

2021-02-09 Thread Helge Hauglin
Hi. We have an ESS 5.0.4.3 cluster with a CES cluster serving files with NFSv4 ACLs to NFS and SMB clients. This system is used for sensitive research data, and will the next years house thousands of research projects, which will have to be strictly separated. Each project has its own