Return-Path: linux-nfs-owner@vger.kernel.org Received: from fieldses.org ([174.143.236.118]:49345 "EHLO fieldses.org" rhost-flags-OK-OK-OK-OK) by vger.kernel.org with ESMTP id S1753593Ab2DTV0a (ORCPT ); Fri, 20 Apr 2012 17:26:30 -0400 Date: Fri, 20 Apr 2012 17:26:27 -0400 To: Jeremy Allison Cc: Ondrej Valousek , "samba-technical@lists.samba.org" , linux-nfs@vger.kernel.org Subject: Re: NFSv4 ACLs Message-ID: <20120420212627.GA710@fieldses.org> References: <4F913492.8000402@s3group.cz> <20120420185553.GB32622@samba2> MIME-Version: 1.0 Content-Type: text/plain; charset=us-ascii In-Reply-To: <20120420185553.GB32622@samba2> From: "J. Bruce Fields" Sender: linux-nfs-owner@vger.kernel.org List-ID: On Fri, Apr 20, 2012 at 11:55:53AM -0700, Jeremy Allison wrote: > On Fri, Apr 20, 2012 at 12:04:02PM +0200, Ondrej Valousek wrote: > > Hi List, > > > > I know this has been asked many times, but I will ask one more time: > > I would like to export NFSv4 mounted filesystem with Samba and would > > like to be able to use windows "security tab" in explorer to modify > > these ACLs. > > Do I have any chance with Samba on RHEL-5/6? > > Does Linux have local API's to manipulate mounted NFSv4 ACLs ? > > Samba has VFS modules to cope with mapping Windows ACLs onto > NFSv4 ACLs but currently they only work on AIX, Linux with IBM's > gpfs and Solaris right now. > > If you can point me a docs showing the library APIs for Linux > to allow programatic manipulation of NFSv4 ACLs then I can > make it work on Linux too. It's a bit idiosyncratic, but should be easy enough to handle if you want, I think: on the linux client, on an nfs4 filesystem, the "system.nfs4_acl" xattr contains the xdr-encoded ACL as it came in on the wire (network-byte-order and all). See the definition of fattr4_acl in rfc 3530. --b.