<html><head><meta http-equiv="content-type" content="text/html; charset=utf-8"></head><body dir="auto">I don’t understand why not having permission(s) doesn’t prevent the user from writing into the fileset...<br><br>As described, your case is about not wanting userA to be able to write to a fileset if userA isn’t in some groups. Don’t put them in those groups. That’s not even Spectrum Scale specific, it’s about generic *nix permissions.<div><br></div><div>What am I missing? I don’t understand why you would want to use quota to enforce permissions. (There could be a legitimate reason here, but I don’t understand it.)</div><div><br></div><div>Liberty,</div><div><br><div><div><div><div id="AppleMailSignature">-- <div>Stephen Ulmer</div><div><br></div><div>Sent from a mobile device; please excuse autocorrect silliness.</div></div><div><br>On Dec 3, 2017, at 10:49 PM, IBM Spectrum Scale <<a href="mailto:scale@us.ibm.com">scale@us.ibm.com</a>> wrote:<br><br></div><blockquote type="cite"><div><font size="2" face="sans-serif">Hi Keith,</font><br><br><font size="2" face="sans-serif">You can use ACLs for fine grained permissions.
A quota limit of 0 in GPFS implies no limits.</font><br><br><font size="2" face="sans-serif">Regards, The Spectrum Scale (GPFS) team<br><br>------------------------------------------------------------------------------------------------------------------<br>If you feel that your question can benefit other users of Spectrum
Scale (GPFS), then please post it to the public IBM developerWroks Forum
at </font><a href="https://www.ibm.com/developerworks/community/forums/html/forum?id=11111111-0000-0000-0000-000000000479"><font size="2" face="sans-serif">https://www.ibm.com/developerworks/community/forums/html/forum?id=11111111-0000-0000-0000-000000000479</font></a><font size="2" face="sans-serif">.
<br><br>If your query concerns a potential software error in Spectrum Scale (GPFS)
and you have an IBM software maintenance contract please contact 1-800-237-5511
in the United States or your local IBM Service Center in other countries.
<br><br>The forum is informally monitored as time permits and should not be used
for priority messages to the Spectrum Scale (GPFS) team.</font><br><br><br><br><font size="1" color="#5f5f5f" face="sans-serif">From:
</font><font size="1" face="sans-serif">Keith Ball <<a href="mailto:bipcuds@gmail.com">bipcuds@gmail.com</a>></font><br><font size="1" color="#5f5f5f" face="sans-serif">To:
</font><font size="1" face="sans-serif"><a href="mailto:gpfsug-discuss@spectrumscale.org">gpfsug-discuss@spectrumscale.org</a></font><br><font size="1" color="#5f5f5f" face="sans-serif">Date:
</font><font size="1" face="sans-serif">12/04/2017 08:19 AM</font><br><font size="1" color="#5f5f5f" face="sans-serif">Subject:
</font><font size="1" face="sans-serif">[gpfsug-discuss]
Smallest block quota/limit and file quota/limit possible
to set?</font><br><font size="1" color="#5f5f5f" face="sans-serif">Sent by:
</font><font size="1" face="sans-serif"><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org">gpfsug-discuss-bounces@spectrumscale.org</a></font><br><hr noshade=""><br><br><br><font size="3">From: Keith Ball <</font><a href="mailto:kball@redlineperf.com"><font size="3" color="blue"><u>kball@redlineperf.com</u></font></a><font size="3">><br>To: </font><a href="mailto:gpfsug-discuss@spectrumscale.org"><font size="3" color="blue"><u>gpfsug-discuss@spectrumscale.org</u></font></a><font size="3"><br>Cc: <br>Bcc: <br>Date: Sun, 3 Dec 2017 16:13:13 -0500<br>Subject: Smallest block quota/limit and file quota/limit possible
to set?</font><br><font size="3">HI All,<br></font><br><font size="3">We have a system where all users have their own private
group as well. However, for a given fileset (we are using --perfileset-quota),
we would like to ONLY allow users who also belong to just a few central
groups to be able to write to the fileset. <br><br>That is, user "userA" has its own "groupA", but we
only want the user to be able to write to the fileset if:</font><br><font size="3"> - userA belongs to one of the groups (e.g. group1,
group2, group3) that have explicitly set quotas</font><br><font size="3"> - The group(s) in question are within quota/limits.<br></font><br><font size="3">In general, we do not want any users that do NOT belong
to one of the three groups with enabled quotas to be able to write anything
at all to the fileset.<br></font><br><font size="3">Is there a way to set a ZERO quota for block/file in GPFS,
that means what it actually should mean? i.e. "Your limit is 0 file
= you cannot create files in this fileset". Creating some kind of
"supergroup" owner of the fileset (with entitled users as members
of the group) could work, but that will only work for *one* group. <br></font><br><font size="3">If we cannot set the block and file limits to zero, what
*are* the smallest block and fie limits? In GPFS 3.5, they seem to be 1760MB
for block. Is there a smallest quota for files? (blocksize is 16MB, which
will be reduced to 4MB probably, in a subsequent cluster).<br></font><br><font size="3">Many Thanks,</font><br><font size="3"> Keith <br><br><br><br>-- <br>Keith D. Ball, PhD</font><br><font size="3">RedLine Performance Solutions, LLC</font><br><font size="3">web: </font><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__www.redlineperf.com_&d=DwMFaQ&c=jf_iaSHvJObTbx-siA1ZOg&r=IbxtjdkPAM2Sbon4Lbbi4w&m=N0b8UJpG1zFuuQjvCE1SaaIG2EUDv4v783wDc3TbnyM&s=tbMiSPlZvkq1xE6Mf5bnld0dlU32qMR4yK19mM_YFCo&e=" target="_blank"><font size="3" color="blue"><u>http://www.redlineperf.com/</u></font></a><br><font size="3">email: </font><a href="mailto:aqualkenbush@redlineperf.com" target="_blank"><font size="3" color="blue"><u>kball@redlineperf.com</u></font></a><br><font size="3">cell: </font><a href="tel:(540)%20557-7851" target="_blank"><font size="3" color="blue"><u>540-557-7851</u></font></a><tt><font size="2">_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at <a href="http://spectrumscale.org">spectrumscale.org</a><br></font></tt><a href="https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=IbxtjdkPAM2Sbon4Lbbi4w&m=N0b8UJpG1zFuuQjvCE1SaaIG2EUDv4v783wDc3TbnyM&s=vuNQN4VJonV9nmcTEOKKr-hL2LAWSOUV7HKAQBKWcK4&e="><tt><font size="2">https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=IbxtjdkPAM2Sbon4Lbbi4w&m=N0b8UJpG1zFuuQjvCE1SaaIG2EUDv4v783wDc3TbnyM&s=vuNQN4VJonV9nmcTEOKKr-hL2LAWSOUV7HKAQBKWcK4&e=</font></tt></a><tt><font size="2"><br></font></tt><br><br><br></div></blockquote><blockquote type="cite"><div><span>_______________________________________________</span><br><span>gpfsug-discuss mailing list</span><br><span>gpfsug-discuss at <a href="http://spectrumscale.org">spectrumscale.org</a></span><br><span><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a></span><br></div></blockquote></div></div></div></div></body></html>