<html xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Title" content="">
<meta name="Keywords" content="">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:sans-serif;
panose-1:0 0 0 0 0 0 0 0 0 0;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:12.0pt;
font-family:"Times New Roman";}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:#0563C1;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:#954F72;
text-decoration:underline;}
span.EmailStyle17
{mso-style-type:personal-reply;
font-family:Calibri;
color:windowtext;}
span.msoIns
{mso-style-type:export-only;
mso-style-name:"";
text-decoration:underline;
color:teal;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style>
</head>
<body bgcolor="white" lang="EN-US" link="#0563C1" vlink="#954F72">
<div class="WordSection1">
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri">I don’t have the exact answer to this issue but I had dealt with something similar before. I’m thinking this may have something to do with NFSv4 needing to be kerberized to work with AD?
Again, not really sure on the SpecScale specifics here but worth seeing if you need Kerberos as well to get this to authenticate properly with AD and NFSv4.<o:p></o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<p class="MsoNormal"><span style="font-size:11.0pt;font-family:Calibri"><o:p> </o:p></span></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-family:Calibri;color:black">From: </span>
</b><span style="font-family:Calibri;color:black"><gpfsug-discuss-bounces@spectrumscale.org> on behalf of Andy Parker1 <andy_parker1@uk.ibm.com><br>
<b>Reply-To: </b>gpfsug main discussion list <gpfsug-discuss@spectrumscale.org><br>
<b>Date: </b>Friday, November 11, 2016 at 10:20 AM<br>
<b>To: </b>"gpfsug-discuss@spectrumscale.org" <gpfsug-discuss@spectrumscale.org><br>
<b>Subject: </b>[gpfsug-discuss] SS 4.2.1 + CES NFS / SMB<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<p class="MsoNormal"><span style="font-size:10.0pt;font-family:"sans-serif","serif"">We have setup a small cluster to test, play & learn about the protocol servers. We have setup mmuserauth for AD + RFC2307 and
<br>
we can share and access data via SMB and access is on windows clients with no issues.</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">The file DAC of a file created via windows looks like this from the SS cesNode:</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">$ ls -l</span> <br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">total 0</span> <br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">-rwxr--r-- 1 SPECTRUMSCALE\newmanjo SPECTRUMSCALE\ces-admins 33 Nov 10 17:29 helloworld.txt</span>
<br>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">The NFS protocol is also exported for NFS 3,4 and when mount using NFS version '3' from an AIX 7.1 server I see also</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">OK DAC names uid / group, so the UID mapping is working. The AIX is linked to the AD for LDAP account services and</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">I can query accounts and get shell logon for accounts defined within AD for unix services.</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif""># ls -l ( from AIX client NFS V3)</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">total 0</span> <br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">-rwxr--r-- 1 newmanjo ces-admi 33 10 Nov 17:29 helloworld.txt</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">Now the Problem:</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">When I mount the AIX client as NFS4 I do no see the user/group names. I know NFS4 passes names and not UID/GID numbers so I
</span><br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">guess this is linked.</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif""># pwd</span> <br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">/mnt/ibm/hurss/share1</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif""># ls -l ( from AIX client NFS V4)</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">total 0</span> <br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">-rwxr--r-- 1 nobody nobody 33 10 Nov 17:29 helloworld.txt</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">On the AIX server I have set NFS domain to virtual1.com</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif""># chnfsdom</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">Current local domain: virtual1.com</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">This matches the DOMAIN from the mmnfs config list domain ( not 100% sure this is correct)</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">[root@hurss4 ~]# mmnfs config list</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">NFS Ganesha Configuration:</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">==========================</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">NFS_PROTOCOLS: 3,4</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">NFS_PORT: 2049</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">MNT_PORT: 0</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">NLM_PORT: 0</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">RQUOTA_PORT: 0</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">SHORT_FILE_HANDLE: FALSE</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">LEASE_LIFETIME: 60</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">DOMAINNAME: VIRTUAL1.COM</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">DELEGATIONS: Disabled</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">Also the 'nfsrgyd' </span>a name translation service for NFS servers and clients
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">is running.</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">lssrc -s nfsrgyd</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">Subsystem Group PID Status
</span><br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif""> nfsrgyd nfs 8585412 active</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">Summary / Question:</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif""><br>
Can anybody explain why I do not see userID / Group names when viewing via a NFS4 client and ideally how to fix this.</span>
<br>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif"">Rgds Andy P</span>
<br>
<span style="font-size:10.0pt;font-family:"sans-serif","serif""><br>
Unless stated otherwise above:<br>
IBM United Kingdom Limited - Registered in England and Wales with number 741598. <br>
Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6 3AU<br>
<br>
</span><o:p></o:p></p>
</div>
<p style="font-size:8pt; line-height:10pt; font-family: 'Cambria','times roman',serif;">
This message (including any attachments) is intended only for the use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, privileged, confidential, and exempt from disclosure under applicable law.
If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. This message may be viewed by parties at Sirius Computer Solutions other than those named in
the message header. This message does not contain an official representation of Sirius Computer Solutions. If you have received this communication in error, notify Sirius Computer Solutions immediately and (i) destroy this message if a facsimile or (ii) delete
this message immediately if this is an electronic communication. Thank you. </p>
<span style="padding-top:10px; font-weight:bold; color:#CC0000; font-size:10pt; font-family: 'Calibri',Arial,sans-serif; "><a href="http://www.siriuscom.com">Sirius Computer Solutions</a></span>
<div></div>
</body>
</html>