<font size=2 face="sans-serif">Hi</font><br><br><font size=2 face="sans-serif">The protocols CES nodes are configure
to get users data from the AD, so all files there show as "DOMain\User"
output.</font><br><br><font size=2 face="sans-serif">When files created from NFSv3 is will
have the same UID as in the CES nodes - but different user name - and there
is mismatch when u work with NFSv4.</font><br><br><font size=2 face="sans-serif">Since NFSv4 check for "Domain\user"
format - in both server & client u must have the same username in the
CES & Nodes.</font><br><br><font size=2 face="sans-serif">Now - if files were create from CIFS
share , i guess you will not have problem to define in the ACL inherent
permissions so each file will be created with Domain\User , and when u
mount it from NFSv3 it will take the UID - and have the right permissions.</font><br><br><font size=2 face="sans-serif">One more thing - in case u see permissions
for files create from CIFS like this:</font><br><font size=2 face="sans-serif">d --- --- ---</font><br><br><font size=2 face="sans-serif">Put in the CIFS share the OWNER USER
+ OWNER group ACL inherent permissions , this will show u the right permissions
when working with NFSv3.</font><br><font size=1 face="Arial"> </font><p><font size=2 face="Arial">Regards</font><p><font size=1 face="Arial"> </font><p><table width=780 style="border-collapse:collapse;"><tr height=8><td width=780 colspan=4 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><div align=center><hr noshade></div><p><font size=1 face="Arial"> </font><tr height=8><td width=780 colspan=4 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 face="Arial"> </font><tr height=8><td width=516 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=blue face="Arial"><b>Yaron
Daniel</b></font><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial"> 94
Em Ha'Moshavot Rd</font><td width=96 rowspan=3 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><div align=right><img align=bottom src=cid:_1_0CF78B380CF785A4006E55AAC225806B style="border:0px solid;"></div><tr height=8><td width=516 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=blue face="Arial"><b>Server,
</b></font><a href="https://w3-03.ibm.com/services/isd/secure/client.wss/Somt?eventType=getHomePage&somtId=115"><font size=2 color=blue face="Arial"><b>Storage
and Data Services</b></font></a><font size=2 color=blue face="Arial"><b>- Team Leader</b></font><font size=1 color=blue face="Arial"><b>
</b></font><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial"> Petach
Tiqva, 49527</font><tr height=8><td width=516 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=blue face="Arial"><b>Global
Technology Services</b></font><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial"> Israel</font><tr height=8><td width=90 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">Phone:</font><td width=426 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">+972-3-916-5672</font><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial"> </font><td width=96 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2> </font><tr height=8><td width=90 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">Fax:</font><td width=426 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">+972-3-916-5672</font><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">
</font><td width=96 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2> </font><tr height=8><td width=90 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">Mobile:</font><td width=426 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">+972-52-8395593</font><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">
</font><td width=96 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2> </font><tr height=8><td width=90 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">e-mail:</font><td width=426 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">yard@il.ibm.com</font><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">
</font><td width=96 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2> </font><tr height=8><td width=516 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><a href=http://www.ibm.com/il/he/><font size=2 color=blue face="Arial"><u>IBM
Israel</u></font></a><td width=168 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2 color=#5f5f5f face="Arial">
</font><td width=96 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=2> </font><tr height=8><td width=780 colspan=4 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial"> </font><tr height=8><td width=780 colspan=4 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><font size=1 color=#5f5f5f face="Arial"> </font></table><br><p><font size=3> </font><br><br><br><br><font size=1 color=#5f5f5f face="sans-serif">From:
</font><font size=1 face="sans-serif">"Mark.Bush@siriuscom.com"
<Mark.Bush@siriuscom.com></font><br><font size=1 color=#5f5f5f face="sans-serif">To:
</font><font size=1 face="sans-serif">gpfsug main discussion
list <gpfsug-discuss@spectrumscale.org></font><br><font size=1 color=#5f5f5f face="sans-serif">Date:
</font><font size=1 face="sans-serif">11/14/2016 09:48 PM</font><br><font size=1 color=#5f5f5f face="sans-serif">Subject:
</font><font size=1 face="sans-serif">Re: [gpfsug-discuss]
SS 4.2.1 + CES NFS / SMB</font><br><font size=1 color=#5f5f5f face="sans-serif">Sent by:
</font><font size=1 face="sans-serif">gpfsug-discuss-bounces@spectrumscale.org</font><br><hr noshade><br><br><br><font size=2 face="Calibri">I don’t have the exact answer to this
issue but I had dealt with something similar before. I’m thinking
this may have something to do with NFSv4 needing to be kerberized to work
with AD? Again, not really sure on the SpecScale specifics here but
worth seeing if you need Kerberos as well to get this to authenticate properly
with AD and NFSv4.</font><br><font size=2 face="Calibri"> </font><br><font size=2 face="Calibri"> </font><br><font size=2 face="Calibri"> </font><br><font size=3 face="Calibri"><b>From: </b><gpfsug-discuss-bounces@spectrumscale.org>
on behalf of Andy Parker1 <andy_parker1@uk.ibm.com><b><br>Reply-To: </b>gpfsug main discussion list <gpfsug-discuss@spectrumscale.org><b><br>Date: </b>Friday, November 11, 2016 at 10:20 AM<b><br>To: </b>"gpfsug-discuss@spectrumscale.org" <gpfsug-discuss@spectrumscale.org><b><br>Subject: </b>[gpfsug-discuss] SS 4.2.1 + CES NFS / SMB</font><br><font size=3 face="Times New Roman"> </font><br><font size=2 face="sans-serif">We have setup a small cluster to test,
play & learn about the protocol servers. We have setup mmuserauth
for AD + RFC2307 and <br>we can share and access data via SMB and access is on windows clients with
no issues.</font><font size=3 face="Times New Roman"> <br></font><font size=2 face="sans-serif"><br>The file DAC of a file created via windows looks like this from the SS
cesNode:</font><font size=3 face="Times New Roman"> <br></font><font size=2 face="sans-serif"><br>$ ls -l</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>total 0</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>-rwxr--r-- 1 SPECTRUMSCALE\newmanjo SPECTRUMSCALE\ces-admins 33 Nov 10
17:29 helloworld.txt</font><font size=3 face="Times New Roman"> <br><br></font><font size=2 face="sans-serif"><br>The NFS protocol is also exported for NFS 3,4 and when mount
using NFS version '3' from an AIX 7.1 server I see also</font><font size=3 face="Times New Roman"></font><font size=2 face="sans-serif"><br>OK DAC names uid / group, so the UID mapping is working. The AIX
is linked to the AD for LDAP account services and</font><font size=3 face="Times New Roman"></font><font size=2 face="sans-serif"><br>I can query accounts and get shell logon for accounts defined within AD
for unix services.</font><font size=3 face="Times New Roman"> <br></font><font size=2 face="sans-serif"><br># ls -l ( from AIX client NFS V3)</font><font size=3 face="Times New Roman"></font><font size=2 face="sans-serif"><br>total 0</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>-rwxr--r-- 1 newmanjo ces-admi
33 10 Nov 17:29 helloworld.txt</font><font size=3 face="Times New Roman"><br></font><font size=2 face="sans-serif"><br>Now the Problem:</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>When I mount the AIX client as NFS4 I do no see the user/group
names. I know NFS4 passes names and not UID/GID numbers so I <br>guess this is linked.</font><font size=3 face="Times New Roman"> <br></font><font size=2 face="sans-serif"><br># pwd</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>/mnt/ibm/hurss/share1</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br># ls -l ( from AIX client NFS V4)</font><font size=3 face="Times New Roman"></font><font size=2 face="sans-serif"><br>total 0</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>-rwxr--r-- 1 nobody nobody
33 10 Nov 17:29 helloworld.txt</font><font size=3 face="Times New Roman"><br></font><font size=2 face="sans-serif"><br>On the AIX server I have set NFS domain to virtual1.com</font><font size=3 face="Times New Roman"><br></font><font size=2 face="sans-serif"><br># chnfsdom</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>Current local domain: virtual1.com</font><font size=3 face="Times New Roman"><br></font><font size=2 face="sans-serif"><br>This matches the DOMAIN from the mmnfs config list domain ( not 100% sure
this is correct)</font><font size=3 face="Times New Roman"> <br></font><font size=2 face="sans-serif"><br>[root@hurss4 ~]# mmnfs config list</font><font size=3 face="Times New Roman"><br></font><font size=2 face="sans-serif"><br>NFS Ganesha Configuration:</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>==========================</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>NFS_PROTOCOLS: 3,4</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>NFS_PORT: 2049</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>MNT_PORT: 0</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>NLM_PORT: 0</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>RQUOTA_PORT: 0</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>SHORT_FILE_HANDLE: FALSE</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>LEASE_LIFETIME: 60</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>DOMAINNAME: VIRTUAL1.COM</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>DELEGATIONS: Disabled</font><font size=3 face="Times New Roman"> <br></font><font size=2 face="sans-serif"><br>Also the 'nfsrgyd' </font><font size=3 face="Times New Roman">a name
translation service for NFS servers and clients </font><font size=2 face="sans-serif">is
running.</font><font size=3 face="Times New Roman"> <br></font><font size=2 face="sans-serif"><br>lssrc -s nfsrgyd</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br>Subsystem Group
PID Status <br> nfsrgyd nfs
8585412 active</font><font size=3 face="Times New Roman"><br></font><font size=2 face="sans-serif"><br>Summary / Question:</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br><br>Can anybody explain why I do not see userID / Group names when viewing
via a NFS4 client and ideally how to fix this.</font><font size=3 face="Times New Roman"><br></font><font size=2 face="sans-serif"><br>Rgds Andy P</font><font size=3 face="Times New Roman"> </font><font size=2 face="sans-serif"><br><br>Unless stated otherwise above:<br>IBM United Kingdom Limited - Registered in England and Wales with number
741598. <br>Registered office: PO Box 41, North Harbour, Portsmouth, Hampshire PO6
3AU<br></font><p><font size=1 face="Cambria">This message (including any attachments)
is intended only for the use of the individual or entity to which it is
addressed and may contain information that is non-public, proprietary,
privileged, confidential, and exempt from disclosure under applicable law.
If you are not the intended recipient, you are hereby notified that any
use, dissemination, distribution, or copying of this communication is strictly
prohibited. This message may be viewed by parties at Sirius Computer Solutions
other than those named in the message header. This message does not contain
an official representation of Sirius Computer Solutions. If you have received
this communication in error, notify Sirius Computer Solutions immediately
and (i) destroy this message if a facsimile or (ii) delete this message
immediately if this is an electronic communication. Thank you. </font><p><a href=http://www.siriuscom.com/><font size=2 color=#0082bf face="Calibri"><b><u>Sirius
Computer Solutions</u></b></font></a><font size=3> </font><tt><font size=2>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></font></tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><tt><font size=2>http://gpfsug.org/mailman/listinfo/gpfsug-discuss</font></tt></a><tt><font size=2><br></font></tt><p><p><BR>