2007-06-15 12:56:45

by Bodo Eggert

[permalink] [raw]
Subject: Inconsistent ACL beahaviour with nfs vs. local

Please CC me on reply.

I'd like to set up a public directory tree to let one user (me)
administrate everything, and all users to r-x all files. I set
up these ACL:

# file: .
# owner: root
# group: root
user::rwx
group::rwx
other::r-x
default:user::rwx
default:user:7eggert:rwx
default:group::rwx
default:mask::rwx
default:other::r-x

If I'm working from the local machine, the fs behaves as intended, but if
I'm working from NFS, the umask group bits will clobber the mask bits:

root@server: mkdir from-local
root@client: mkdir from-nfs (mounted no_squash, umask=022)

# file: from-local
# owner: root
# group: root
user::rwx
user:7eggert:rwx
group::rwx
mask::rwx
other::r-x
default:user::rwx
default:user:7eggert:rwx
default:group::rwx
default:mask::rwx
default:other::r-x

# file: from-nfs
# owner: root
# group: root
user::rwx
user:7eggert:rwx #effective:r-x
group::rwx #effective:r-x
mask::r-x
other::r-x
default:user::rwx
default:user:7eggert:rwx
default:group::rwx
default:mask::rwx
default:other::r-x


The same undesired behaviour has been acknowledged as a bug in Solaris:
http://groups.google.com/group/comp.unix.solaris/browse_thread/thread/
ced50ad4a93cc9f7/73b1c841180d4010?lnk=st&q=acl+default+mask&rnum=16&hl=en


Used versions:
Server kernel is 2.6.16 (cannot be upgraded due to external module)
Client kernel is 2.6.21
Filesystem is reiserfs3
NFS version is now 4, I upgraded from v2 while trying to resolve this problem.
util-linux-2.11z-125
libevent-0.7.tar.gz
libgssapi-0.11.tar.gz
libnfsidmap-0.19.tar.gz
librpcsecgss-0.14.tar.gz
nfs-utils-1.1.0.tar.gz
e2fsprogs-1.39.tar.gz
acl-2.2.15-23 (this would not affect the kernel nfs daemon, would it?)
libacl-2.2.15-23
libacl-devel-2.2.15-23


exportfs -v: (trimmed)
/export/data
192.168.x.xxx(rw,async,wdelay,crossmnt,no_root_squash,no_subtree_check,mountpoint)
/export
<world>(rw,wdelay,crossmnt,root_squash,all_squash,no_subtree_check,fsid=0)


Please CC me on reply.
--
Top 100 things you don't want the sysadmin to say:
81. The drive ate the tape but that's OK, I brought my screwdriver.

-------------------------------------------------------------------------
This SF.net email is sponsored by DB2 Express
Download DB2 Express C - the FREE version of DB2 express and take
control of your XML. No limits. Just data. Click to get it now.
http://sourceforge.net/powerbar/db2/
_______________________________________________
NFS maillist - [email protected]
https://lists.sourceforge.net/lists/listinfo/nfs