Hi,

Ok, I've done this with success on NexentaStor 3.0.5, using zpool version 26. I know the aclmode was removed at some point after this, but then put back in later. (Search the list for details.)

I've got the acl's below set on the top level directory. I put my users requirering access in the group_with_write_access. I found that the nfs anonymous account requires the "read attributes" access for Linux clients to be able to mount the folder. This folder is also shared with kerberos (sec=krb5).


A:fdg:group_with_write_acc...@my.nfs4.id:rwadxtTnNcy
A::nfsanonym...@my.nfs4.id:ty
A:fd:r...@my.nfs4.id:rwaDdxtTnNcCoy
A:fdni:r...@my.nfs4.id:rwaDdxTNCoy


Rgds,
Siggi




On 07/17/2011 03:37 PM, anikin anton wrote:
Hi!
But in 28 version of zfs there is no aclmode option at all (i use oi_148).
Also tried set this options to passthrough in oi_151 which has aclmode, but 
this not working for me.
 From Windows (cifs) - no problem, all acl's inherited correctly.
But from Linux (nfs) - acl user names inherited correctly, but permissions not 
inherited as i wish.
Maybe i need to set another properties, or permissions?
Like that:
$ /bin/ls -lV /rpool/test
total 6
drwxrwsrwx+  2 2147483650 staff          3 Jul 17 17:33 cifs_folder
             user:2147483650:rwxpdDaARWcCos:fd----I:allow
                      group@:rwxpdDaARWcCos:fd----I:allow
                      owner@:rwxpdDaARWcCos:fd----I:allow
                   everyone@:rwxpdDaARWcCos:fd----I:allow
drwxrwxr-x+  2 500      staff          3 Jul 17 17:36 nfs_folder
         user:2147483650:rwxpdDaARWcCos:fd----I:allow
                  owner@:rwxp--aARWcCos:-------:allow
                  group@:rwxp--a-R-c--s:-------:allow
               everyone@:r-x---a-R-c--s:-------:allow

Thanks!


Hi,

Set the zfs properties aclmode *and* aclinherit
properties to
passthrough for the dataset you're writing to.

This works for me having both Windows clients using
cifs, and Linux
clients using nfs.



Regards,
Siggi


_______________________________________________
zfs-discuss mailing list
zfs-discuss@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/zfs-discuss

Reply via email to