This post is more than 5 years old
3 Posts
1
3701
May 3rd, 2017 16:00
ISILON 8.0.4, RHEL[6,7] NFSv4 clients and ACL not working properly.
Is there anybody accessing an ISILON cluster running OneFS 8.0.0.4 from RHEL6 or 7 NFSv4 clients ?
We are experiencing some issues with ACLs on the client side. We are able to mount and access NFSv4 exports without any problem, but we are not able to make NFSv4 ACL working properly. The command "nfs4_setfacl" runs silently and does not report any error (no error message and return code is 0).
The ISILON export is of course mounted by the NFSv4 client with the options "nfsvers=4,acl,sec=sys".
More generally, is there a documentation or a guide describing how to configure NFSv4 for both the ISLON cluster and Linux clients ?
0 events found
No Events found!
in2p3dc
3 Posts
2
May 21st, 2017 14:00
Hello Peter and thank you for your answer.
> Do the file and the enclosing directory have ACLs set? (check on the Isilon with ls -le)
No, we actually noticed that none of the ACLs set with nfs4_stefacl were carried to the Isilon side.
> Does nfs4_getfacl return something consistent with either the ACLs or Unix bits (whatever applies)?
nfs4_getfacl only reports Unix bits.
We finally found what was the misconfiguration. We have recently upgraded from 7.1.1.9 to 8.0.0.2. During this migration the configuration parameter enabling the use of NFSv4 ACLs seems to have been reset.
We then had to modify the "General ACL Settings". For sure, why did not we think about this before? Probably because the configuration parameter is "Allow ACLs to be created through SMB".
After some echanges with the support team, it seems that this parameter should be interpreted "Allow ACLs to be created through SMB and NFSv4" and not only SMB. Peharps the label of this configuration parameter should be modified in the future to clarify the feature.
NFSv4 ACL is again working properly and we are again Isilon happy users.
Thank you again Peter for taking the time to respond, we hope that these exchanges will help others in the future.
Cheers!
Benoit
in2p3dc
3 Posts
0
May 15th, 2017 10:00
Hello Isilon Community,
Is there really no Isilon users in this community that are using NFSv4 and who could help us ?
Thanks,
Benoit
Peter_Sero
4 Operator
•
1.2K Posts
0
May 17th, 2017 07:00
Not sure what to make of silent failures of nfs4_setfacl...
OneFS can be configured to ignore chmod on files with ACLs,
but I'm not aware of the other way round -- which would be what you describe.
Do the file and the enclosing directory have ACLs set? (check on the Isilon with ls -le)
Does nfs4_getfacl return something consistent with either the ACLs or Unix bits (whatever applies)?
Cheers
-- Peter
Peter_Sero
4 Operator
•
1.2K Posts
1
May 22nd, 2017 07:00
"Allow ACLs to be created through SMB and NFSv4"
This really make much more sense! Thank for sharing!
-- Peter