<span style=" font-size:10pt;font-family:sans-serif">Hello Kevin,</span><br><br><span style=" font-size:10pt;font-family:sans-serif">No, you're not

missing something. GPFS doesn't provide a means of recursively modifying

ACLs. It's not even all that easy to just modify one ACL for one file (it's

either mmeditacl, or mmgetacl > /tmp/acl.txt; vi /tmp/acl.txt; mmputacl

-i /tmp/acl.txt).</span><br><br><span style=" font-size:10pt;font-family:sans-serif">I've had a few

queries along these lines over the years and decided to publish a little

bit of a guide here:</span><br><br><a href="https://www-prd-trops.events.ibm.com/node/how-recursively-set-nfsv4-acls-gpfs-filesystem"><span style=" font-size:12pt;color:blue"><u>https://www-prd-trops.events.ibm.com/node/how-recursively-set-nfsv4-acls-gpfs-filesystem</u></span></a><span style=" font-size:12pt"></span><span style=" font-size:10pt;font-family:sans-serif"><br></span><br><span style=" font-size:10pt;font-family:sans-serif">There's a sample

script there for the recursive part, but that would still have to be tweaked

in your case to append just a single ACE to the existing ACL rather than

replace the whole ACL.</span><br><br><span style=" font-size:10pt;font-family:sans-serif">Or as others have

noted, export the fileset via NFS and go to an NFS client and use nfs4_setfacl

instead.</span><br><br><span style=" font-size:10pt;font-family:sans-serif">Thanks,</span><br><span style=" font-size:9pt;font-family:Arial"><br></span><table width=650 style="border-collapse:collapse;"><tr height=8><td width=650 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:12pt;color:#8f8f8f;font-family:Arial"><b>Nate

Falk<span style=" font-size:9pt;font-family:Arial"> IBM Spectrum Scale Level 2 Support Software Defined Infrastructure, IBM Systems</table><p style="margin-top:0px;margin-Bottom:0px"><table width=650 style="border-collapse:collapse;"><tr height=8><td width=650 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><hr><tr valign=top height=8><td width=363 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:7pt;color:#4181c0;font-family:Arial"> E-mail:<span style=" font-size:7pt;color:#5f5f5f;font-family:Arial"><a href="mailto:nfalk@us.ibm.com" target="_blank"><span style=" font-size:7pt;color:#5f5f5f;font-family:Arial">nfalk@us.ibm.com</a><span style=" font-size:7pt;color:#4181c0;font-family:Arial"> Find me on:<span style=" font-size:7pt;color:#5f5f5f;font-family:Arial"><a href="https://www.linkedin.com/in/nathan-falk-078ba5125" target="_blank"><img src=http://www.ibm.com/webaccessories/emailsig/i/LinkedIn.jpg alt="LinkedIn: https://www.linkedin.com/in/nathan-falk-078ba5125" style="border:0px solid;"></a><span style=" font-size:7pt;color:#5f5f5f;font-family:Arial"> <a href="https://twitter.com/natefalk922" target="_blank"><img src=http://www.ibm.com/webaccessories/emailsig/i/Twitter.jpg alt="Twitter: https://twitter.com/natefalk922" style="border:0px solid;"></a><span style=" font-size:7pt;color:#5f5f5f;font-family:Arial"><td width=286 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><div align=right><img align=bottom src=http://www.ibm.com/webaccessories/emailsig/i/ibm2.gif width=83 height=30 alt=IBM style="border:0px solid;"></div></table><p style="margin-top:0px;margin-Bottom:0px"> <span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">From:

       </span><span style=" font-size:9pt;font-family:sans-serif">"Buterbaugh,

Kevin L" <Kevin.Buterbaugh@Vanderbilt.Edu> <span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">To:

       </span><span style=" font-size:9pt;font-family:sans-serif">gpfsug

main discussion list <gpfsug-discuss@spectrumscale.org></span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Date:

       </span><span style=" font-size:9pt;font-family:sans-serif">03/27/2019

12:53 PM</span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Subject:

       </span><span style=" font-size:9pt;font-family:sans-serif">Re:

[gpfsug-discuss] Adding to an existing GPFS ACL</span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Sent

by:        </span><span style=" font-size:9pt;font-family:sans-serif">gpfsug-discuss-bounces@spectrumscale.org</span><br><hr noshade><br><br><br><span style=" font-size:12pt">Hi Jonathan, </span><br><br><span style=" font-size:12pt">Thanks.  We have done a very similar

thing when we’re dealing with a situation where:  1) all files and

directories in the fileset are starting out with the same existing ACL,

and 2) all need the same modification made to them.</span><br><br><span style=" font-size:12pt">Unfortunately, in this situation item

2 is true, but item 1 is _not_.  That’s what’s making this one a

bit thorny…</span><br><br><span style=" font-size:12pt">Kevin</span><br><br><span style=" font-size:12pt">—</span><br><span style=" font-size:12pt">Kevin Buterbaugh - Senior System Administrator</span><br><span style=" font-size:12pt">Vanderbilt University - Advanced Computing

Center for Research and Education</span><br><a href="mailto:Kevin.Buterbaugh@vanderbilt.edu"><span style=" font-size:12pt;color:blue"><u>Kevin.Buterbaugh@vanderbilt.edu</u></span></a><span style=" font-size:12pt">- (615)875-9633</span><br><br><span style=" font-size:12pt">On Mar 27, 2019, at 11:33 AM, Fosburgh,Jonathan

<</span><a href="mailto:jfosburg@mdanderson.org"><span style=" font-size:12pt;color:blue"><u>jfosburg@mdanderson.org</u></span></a><span style=" font-size:12pt">>

wrote:</span><br><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Calibri">I

misunderstood you.</span></p><p style="margin-top:0px;margin-Bottom:0px"></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Calibri">Pretty

much what we've been doing is maintaining "ACL template" files

based on how our filesystem hierarchy is set up.  Basically, fileset

foo has a foo.acl file that contains what the ACL is supposed to be.  If

we need to change the ACL, we modify that file with the new ACL and then

pass it through a simple (and expensive, I'm sure) script.  This wouldn't

be necessary if in heritance flowed down on existing files and directories.

 If you have CIFS access, you can also use Windows to do this, but

it is MUCH slower.</span></p><p style="margin-top:0px;margin-Bottom:0px"></p><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">--

</span><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">Jonathan

Fosburgh</span><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">Principal

Application Systems Analyst</span><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">IT

Operations Storage Team</span><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">The

University of Texas MD Anderson Cancer Center</span><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">(713)

745-9346</span><p style="margin-top:0px;margin-Bottom:0px"></p><br><hr><br><span style=" font-size:11pt;font-family:Calibri"><b>From:</b> </span><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>gpfsug-discuss-bounces@spectrumscale.org</u></span></a><span style=" font-size:11pt;font-family:Calibri"><</span><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>gpfsug-discuss-bounces@spectrumscale.org</u></span></a><span style=" font-size:11pt;font-family:Calibri">>

on behalf of Buterbaugh, Kevin L <</span><a href="mailto:Kevin.Buterbaugh@Vanderbilt.Edu"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>Kevin.Buterbaugh@Vanderbilt.Edu</u></span></a><span style=" font-size:11pt;font-family:Calibri">><b><br>Sent:</b> Wednesday, March 27, 2019 11:19:03 AM<b><br>To:</b> gpfsug main discussion list<b><br>Subject:</b> [EXT] Re: [gpfsug-discuss] Adding to an existing GPFS ACL</span><span style=" font-size:11pt"></span><br><span style=" font-size:11pt"> </span><br><span style=" font-size:11pt;color:#806210"><b>WARNING:</b></span><span style=" font-size:11pt">This email originated from outside of MD Anderson. Please validate the

sender's email address before clicking on links or attachments as they

may not be safe. </span><br><span style=" font-size:11pt">Hi Jonathan, </span><br><br><span style=" font-size:11pt">Thanks for the response.  I did

look at mmeditacl, but unless I’m missing something it’s interactive

(kind of like mmedquota is by default).  If I had only a handful of

files / directories to modify that would be fine, but in this case there

are thousands of ACL’s that need modifying.</span><br><br><span style=" font-size:11pt">Am I missing something?  Thanks…</span><br><br><span style=" font-size:11pt">Kevin</span><br><br><span style=" font-size:11pt">—</span><br><span style=" font-size:11pt">Kevin Buterbaugh - Senior System Administrator</span><br><span style=" font-size:11pt">Vanderbilt University - Advanced Computing

Center for Research and Education</span><br><a href="mailto:Kevin.Buterbaugh@vanderbilt.edu"><span style=" font-size:11pt;color:blue"><u>Kevin.Buterbaugh@vanderbilt.edu</u></span></a><span style=" font-size:11pt">- (615)875-9633</span><br><br><span style=" font-size:11pt">On Mar 27, 2019, at 11:02 AM, Fosburgh,Jonathan

<</span><a href="mailto:jfosburg@mdanderson.org"><span style=" font-size:11pt;color:blue"><u>jfosburg@mdanderson.org</u></span></a><span style=" font-size:11pt">>

wrote:</span><br><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Calibri">Try

mmeditacl.</span></p><p style="margin-top:0px;margin-Bottom:0px"></p><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">--

</span><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">Jonathan

Fosburgh</span><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">Principal

Application Systems Analyst</span><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">IT

Operations Storage Team</span><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">The

University of Texas MD Anderson Cancer Center</span><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri">(713)

745-9346</span><p style="margin-top:0px;margin-Bottom:0px"></p><br><hr><br><span style=" font-size:11pt;font-family:Calibri"><b>From:</b> </span><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>gpfsug-discuss-bounces@spectrumscale.org</u></span></a><span style=" font-size:11pt;font-family:Calibri"><</span><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>gpfsug-discuss-bounces@spectrumscale.org</u></span></a><span style=" font-size:11pt;font-family:Calibri">>

on behalf of Buterbaugh, Kevin L <</span><a href="mailto:Kevin.Buterbaugh@Vanderbilt.Edu"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>Kevin.Buterbaugh@Vanderbilt.Edu</u></span></a><span style=" font-size:11pt;font-family:Calibri">><b><br>Sent:</b> Wednesday, March 27, 2019 10:59:17 AM<b><br>To:</b> gpfsug main discussion list<b><br>Subject:</b> [EXT] [gpfsug-discuss] Adding to an existing GPFS ACL</span><span style=" font-size:11pt"></span><br><span style=" font-size:11pt"> </span><br><span style=" font-size:11pt;color:#806210"><b>WARNING:</b></span><span style=" font-size:11pt">This email originated from outside of MD Anderson. Please validate the

sender's email address before clicking on links or attachments as they

may not be safe. </span><br><span style=" font-size:11pt">Hi All, </span><br><br><span style=" font-size:11pt">First off, I have very limited experience

with GPFS ACL’s, so please forgive me if I’m missing something obvious

here.  AFAIK, this is the first time we’ve hit something like this…</span><br><br><span style=" font-size:11pt">We have a fileset where all the files

/ directories have GPFS NFSv4 ACL’s set on them.  However, unlike

most of our filesets where the same ACL is applied to every file / directory

in the share, this one has different ACL’s on different files / directories.

 Now we have the need to add to the existing ACL’s … another group

needs access.  Unlike regular Unix / Linux ACL’s where setfacl can

be used to just add to an ACL (i.e. setfacl -R g:group_name:rwx), I’m

not seeing where GPFS has a similar command … i.e. mmputacl seems to expect

the _entire_ new ACL to be supplied via either manual entry or an input

file.  That’s obviously problematic in this scenario.</span><br><br><span style=" font-size:11pt">So am I missing something?  Is there

an easier solution than writing a script which recurses over the fileset,

gets the existing ACL with mmgetacl and outputs that to a file, edits that

file to add in the new group, and passes that as input to mmputacl?  That

seems very cumbersome and error prone, especially if I’m the one writing

the script!</span><br><br><span style=" font-size:11pt">Thanks…</span><br><br><span style=" font-size:11pt">Kevin</span><br><span style=" font-size:11pt">—</span><br><span style=" font-size:11pt">Kevin Buterbaugh - Senior System Administrator</span><br><span style=" font-size:11pt">Vanderbilt University - Advanced Computing

Center for Research and Education</span><br><a href="mailto:Kevin.Buterbaugh@vanderbilt.edu"><span style=" font-size:11pt;color:blue"><u>Kevin.Buterbaugh@vanderbilt.edu</u></span></a><span style=" font-size:11pt">- (615)875-9633</span><br><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:11pt">The

information contained in this e-mail message may be privileged, confidential,

and/or protected from disclosure. This e-mail message may contain protected

health information (PHI); dissemination of PHI should comply with applicable

federal and state laws. If you are not the intended recipient, or an authorized

representative of the intended recipient, any further review, disclosure,

use, dissemination, distribution, or copying of this message or any attachment

(or the information contained therein) is strictly prohibited. If you think

that you have received this e-mail message in error, please notify the

sender by return e-mail and delete all references to it and its contents

from your systems.</span></p><br><span style=" font-size:11pt">_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at </span><a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fspectrumscale.org%2F&data=02%7C01%7CKevin.Buterbaugh%40vanderbilt.edu%7C06b6070313d74610e17208d6b2d34b57%7Cba5a7f39e3be4ab3b45067fa80faecad%7C0%7C0%7C636893017903154298&sdata=ibZ7tYAcaWNVUSXyRI4LFwF5Ys88mm4uh2zbCZcVi9Y%3D&reserved=0"><span style=" font-size:11pt;color:blue"><u>spectrumscale.org</u></span></a><span style=" font-size:11pt;color:blue"><u><br></u></span><a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgpfsug.org%2Fmailman%2Flistinfo%2Fgpfsug-discuss&data=02%7C01%7CKevin.Buterbaugh%40vanderbilt.edu%7C06b6070313d74610e17208d6b2d34b57%7Cba5a7f39e3be4ab3b45067fa80faecad%7C0%7C0%7C636893017903164307&sdata=fPDCexKWCGIaXSvjMaEz3jiPZOf35fVV%2BfR9t%2FJUhLQ%3D&reserved=0"><span style=" font-size:11pt;color:blue"><u>https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgpfsug.org%2Fmailman%2Flistinfo%2Fgpfsug-discuss&amp;data=02%7C01%7CKevin.Buterbaugh%40vanderbilt.edu%7Cb2040f23087c4aac0b4908d6b2cf11ed%7Cba5a7f39e3be4ab3b45067fa80faecad%7C0%7C1%7C636892999763011551&amp;sdata=pXhLlRfQuJ4bKfib4bQBlWY4OP5WoZh1YQ%2Bjne2ycEY%3D&amp;reserved=0</u></span></a><br><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:11pt">The

information contained in this e-mail message may be privileged, confidential,

and/or protected from disclosure. This e-mail message may contain protected

health information (PHI); dissemination of PHI should comply with applicable

federal and state laws. If you are not the intended recipient, or an authorized

representative of the intended recipient, any further review, disclosure,

use, dissemination, distribution, or copying of this message or any attachment

(or the information contained therein) is strictly prohibited. If you think

that you have received this e-mail message in error, please notify the

sender by return e-mail and delete all references to it and its contents

from your systems.</span></p><br><span style=" font-size:11pt">_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at </span><a href="http://spectrumscale.org/"><span style=" font-size:11pt;color:blue"><u>spectrumscale.org</u></span></a><span style=" font-size:11pt;color:blue"><u><br></u></span><a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgpfsug.org%2Fmailman%2Flistinfo%2Fgpfsug-discuss&data=02%7C01%7CKevin.Buterbaugh%40vanderbilt.edu%7C06b6070313d74610e17208d6b2d34b57%7Cba5a7f39e3be4ab3b45067fa80faecad%7C0%7C1%7C636893017903174312&sdata=OX51kSL5fs8CqW9u0y7MK1omYGqkx%2F3K%2Bwvn9iKjFM8%3D&reserved=0"><span style=" font-size:11pt;color:blue"><u>https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgpfsug.org%2Fmailman%2Flistinfo%2Fgpfsug-discuss&amp;data=02%7C01%7CKevin.Buterbaugh%40vanderbilt.edu%7C06b6070313d74610e17208d6b2d34b57%7Cba5a7f39e3be4ab3b45067fa80faecad%7C0%7C1%7C636893017903174312&amp;sdata=OX51kSL5fs8CqW9u0y7MK1omYGqkx%2F3K%2Bwvn9iKjFM8%3D&amp;reserved=0</u></span></a><br><br><tt><span style=" font-size:10pt">_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></span></tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><tt><span style=" font-size:10pt">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</span></tt></a><tt><span style=" font-size:10pt"><br></span></tt><br><br><BR>