On Thu, Sep 20, 2007 at 12:49:29PM -0700, Paul B. Henson wrote: > > > I was planning to provide CIFS services via Samba. I noticed a posting a > > > while back from a Sun engineer working on integrating NFSv4/ZFS ACL > > > support > > > into Samba, but I'm not sure if that was ever completed and shipped either > > > in the Sun version or pending inclusion in the official version, does > > > anyone happen to have an update on that? Also, I saw a patch proposing a > > > different implementation of shadow copies that better supported ZFS > > > snapshots, any thoughts on that would also be appreciated. > > > > This work is done and, AFAIK, has been integrated into S10 8/07. > > Excellent. I did a little further research myself on the Samba mailing > lists, and it looks like ZFS ACL support was merged into the official > 3.0.26 release. Unfortunately, the patch to improve shadow copy performance > on top of ZFS still appears to be floating around the technical mailing > list under discussion.
ZFS ACL support was going to be merged into 3.0.26 but 3.0.26 ended up being a security fix release and the merge got pushed back. The next release will be 3.2.0 and ACL support will be in there. As others have pointed out though, Samba is included in Solaris 10 Update 4 along with support for ZFS ACLs, Active Directory, and SMF. The patches for the shadow copy module can be found here: http://www.edplese.com/samba-with-zfs.html There are hopefully only a few minor changes that I need to make to them before submitting them again to the Samba team. I recently compiled the module for someone to use with Samba as shipped with U4 and he reported that it worked well. I've made the compiled module available on this page as well if anyone is interested in testing it. The patch doesn't improve performance anymore in order to preserve backwards compatibility with the existing module but adds usability enhancements for both admins and end-users. It allows shadow copy functionality to "just work" with ZFS snapshots without having to create symlinks to each snapshot in the root of each share. For end-users it allows the "Previous Versions" list to be sorted chronologically to make it easier to use. If performance is an issue the patch can be modified to improve performance like the original patch did but this only affects directory listings and is likely negligible in most cases. > > > Is there any facility for managing ZFS remotely? We have a central > > > identity > > > management system that automatically provisions resources as necessary for > [...] > > This is a loaded question. There is a webconsole interface to ZFS which can > > be run from most browsers. But I think you'll find that the CLI is easier > > for remote management. > > Perhaps I should have been more clear -- a remote facility available via > programmatic access, not manual user direct access. If I wanted to do > something myself, I would absolutely login to the system and use the CLI. > However, the question was regarding an automated process. For example, our > Perl-based identity management system might create a user in the middle of > the night based on the appearance in our authoritative database of that > user's identity, and need to create a ZFS filesystem and quota for that > user. So, I need to be able to manipulate ZFS remotely via a programmatic > API. While it won't help you in your case since your users access the files using protocols other than CIFS, if you use only CIFS it's possible to configure Samba to automatically create a user's home directory the first time the user connects to the server. This is done using the "root preexec" share option in smb.conf and an example is provided at the above URL. Ed Plese _______________________________________________ zfs-discuss mailing list zfs-discuss@opensolaris.org http://mail.opensolaris.org/mailman/listinfo/zfs-discuss
