Hi Mary Ellen,

We were looking at this problem and are unsure what the problem is...

To rule out NFS as the root cause, could you create and share a test ZFS file system without any ACLs to see if you can access the data from the
Linux client?

Let us know the result of your test.

Thanks,

Cindy
On 04/28/10 12:54, Mary Ellen Fitzpatrick wrote:
New to Solairs/ZFS and having a difficult time getting ZFS, NFS and ACLs all working together, properly. Trying access/use zfs shared filesystems on a linux client. When I access the dir/files on the linux client, my permissions do not carry over, nor do the newly created files, and I can not create new files/dirs. The permissions/owner on the zfs share are set so the owner (mfitzpat) is allowed to do everything, but permissions are not carrying over via NFS to the linux client. I have googled/read and can not get it right. I think this has something to do with NSF4, but I can not figure it out.

Any help appreciated
Mary Ellen

Running Solaris10 5/09 (u7) on a SunFire x4540 (hecate) with ZFS and zfs shares automounted to Centos5 client (nona-man). Running NIS on nona-man(Centos5) and hecate (zfs) is a client. All works well.

I have created the following zfs filesystems to share and have sharenfs=on
hecate:/zp-ext/spartans/umass> zfs get sharenfs
zp-ext/spartans/umass sharenfs on inherited from zp-ext/spartans zp-ext/spartans/umass/mfitzpat sharenfs on inherited from zp-ext/spartans

set up inheritance:
hecate:/zp-ext/spartans/umass> zfs set aclinherit=passthrough zp-ext/spartans/umass hecate:/zp-ext/spartans/umass> zfs set aclinherit=passthrough zp-ext/spartans/umass/mfitzpat hecate:/zp-ext/spartans/umass> zfs set aclmode=passthrough zp-ext/spartans/umass hecate:/zp-ext/spartans/umass> zfs set aclmode=passthrough zp-ext/spartans/umass/mfitzpat

Set owner:group:
hecate:/zp-ext/spartans/umass> chown mfitzpat:umass mfitzpat
hecate:/zp-ext/spartans/umass> ls -l
total 5
drwxr-xr-x   2 mfitzpat umass          2 Apr 28 13:18 mfitzpat

Permissions:
hecate:/zp-ext/spartans/umass> ls -dv mfitzpat
drwxr-xr-x   2 mfitzpat umass          2 Apr 28 14:06 mfitzpat
    0:owner@::deny
    1:owner@:list_directory/read_data/add_file/write_data/add_subdirectory
        /append_data/write_xattr/execute/write_attributes/write_acl
        /write_owner:allow
    2:group@:add_file/write_data/add_subdirectory/append_data:deny
    3:group@:list_directory/read_data/execute:allow
4:everyone@:add_file/write_data/add_subdirectory/append_data/write_xattr
        /write_attributes/write_acl/write_owner:deny
    5:everyone@:list_directory/read_data/read_xattr/execute/read_attributes
        /read_acl/synchronize:allow

I can access, create/delete files/dirs on the zfs system and permissions hold.
[mfitz...@hecate mfitzpat]$ touch foo
[mfitz...@hecate mfitzpat]$ ls -l
total 1
-rw-r--r--   1 mfitzpat umass          0 Apr 28 14:18 foo

When I try to access the dir/files on the linux client, my permissions do no carry over, nor do the newly created files, and I can not create new files/dirs.
[mfitz...@nona-man umass]$ ls -l
drwxr-xr-x+ 2 root root 2 Apr 28 13:18 mfitzpat

[mfitz...@nona-man mfitzpat]$ pwd
/fs/umass/mfitzpat
[mfitz...@nona-man mfitzpat]$ ls
[mfitz...@nona-man mfitzpat]$


_______________________________________________
zfs-discuss mailing list
zfs-discuss@opensolaris.org
http://mail.opensolaris.org/mailman/listinfo/zfs-discuss

Reply via email to