<html xmlns:v="urn:schemas-microsoft-com:vml" xmlns:o="urn:schemas-microsoft-com:office:office" xmlns:w="urn:schemas-microsoft-com:office:word" xmlns:m="http://schemas.microsoft.com/office/2004/12/omml" xmlns="http://www.w3.org/TR/REC-html40">
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta name="Generator" content="Microsoft Word 15 (filtered medium)">
<!--[if !mso]><style>v\:* {behavior:url(#default#VML);}
o\:* {behavior:url(#default#VML);}
w\:* {behavior:url(#default#VML);}
.shape {behavior:url(#default#VML);}
</style><![endif]--><style><!--
/* Font Definitions */
@font-face
{font-family:"Cambria Math";
panose-1:2 4 5 3 5 4 6 3 2 4;}
@font-face
{font-family:Calibri;
panose-1:2 15 5 2 2 2 4 3 2 4;}
@font-face
{font-family:Tahoma;
panose-1:2 11 6 4 3 5 4 4 2 4;}
/* Style Definitions */
p.MsoNormal, li.MsoNormal, div.MsoNormal
{margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
a:link, span.MsoHyperlink
{mso-style-priority:99;
color:blue;
text-decoration:underline;}
a:visited, span.MsoHyperlinkFollowed
{mso-style-priority:99;
color:purple;
text-decoration:underline;}
p.msonormal0, li.msonormal0, div.msonormal0
{mso-style-name:msonormal;
margin:0in;
margin-bottom:.0001pt;
font-size:11.0pt;
font-family:"Calibri",sans-serif;}
span.EmailStyle20
{mso-style-type:personal-reply;
font-family:"Calibri",sans-serif;
color:windowtext;}
.MsoChpDefault
{mso-style-type:export-only;
font-size:10.0pt;}
@page WordSection1
{size:8.5in 11.0in;
margin:1.0in 1.0in 1.0in 1.0in;}
div.WordSection1
{page:WordSection1;}
--></style><!--[if gte mso 9]><xml>
<o:shapedefaults v:ext="edit" spidmax="1026" />
</xml><![endif]--><!--[if gte mso 9]><xml>
<o:shapelayout v:ext="edit">
<o:idmap v:ext="edit" data="1" />
</o:shapelayout></xml><![endif]-->
</head>
<body lang="EN-US" link="blue" vlink="purple">
<div class="WordSection1">
<p class="MsoNormal">I have a python module that I am nearing the completion of for a project that wraps all of that. It also contains another python script for the easy manipulation of the ACLs from the command line. Once I have that wraped up, hopefully
this week, I would be happy to share.<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<p class="MsoNormal">Chad<o:p></o:p></p>
<p class="MsoNormal">--<o:p></o:p></p>
<p class="MsoNormal">Chad Kerner – <a href="mailto:ckerner@illinois.edu">ckerner@illinois.edu</a><o:p></o:p></p>
<p class="MsoNormal">Senior Storage Engineer, Storage Enabling Technologies<o:p></o:p></p>
<p class="MsoNormal">National Center for Supercomputing Applications<o:p></o:p></p>
<p class="MsoNormal">University of Illinois, Urbana-Champaign<o:p></o:p></p>
<p class="MsoNormal"><o:p> </o:p></p>
<div style="border:none;border-top:solid #B5C4DF 1.0pt;padding:3.0pt 0in 0in 0in">
<p class="MsoNormal"><b><span style="font-size:12.0pt;color:black">From: </span></b><span style="font-size:12.0pt;color:black"><gpfsug-discuss-bounces@spectrumscale.org> on behalf of "Fosburgh,Jonathan" <jfosburg@mdanderson.org><br>
<b>Reply-To: </b>gpfsug main discussion list <gpfsug-discuss@spectrumscale.org><br>
<b>Date: </b>Wednesday, March 27, 2019 at 11:13 AM<br>
<b>To: </b>gpfsug main discussion list <gpfsug-discuss@spectrumscale.org><br>
<b>Subject: </b>Re: [gpfsug-discuss] Adding to an existing GPFS ACL<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div id="divtagdefaultwrapper">
<p><span style="font-size:12.0pt;color:black">Try mmeditacl.<o:p></o:p></span></p>
<p><span style="font-size:12.0pt;color:black"><o:p> </o:p></span></p>
<div id="Signature">
<div id="divtagdefaultwrapper">
<div>
<div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="color:#212121">-- </span><span style="font-size:11.5pt;font-family:"Tahoma",sans-serif;color:#212121"><o:p></o:p></span></p>
</div>
<div>
<div>
<p class="MsoNormal"><span style="color:#212121">Jonathan Fosburgh</span><span style="font-size:11.5pt;font-family:"Tahoma",sans-serif;color:#212121"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#212121">Principal Application Systems Analyst</span><span style="font-size:11.5pt;font-family:"Tahoma",sans-serif;color:#212121"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#212121">IT Operations Storage Team</span><span style="font-size:11.5pt;font-family:"Tahoma",sans-serif;color:#212121"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#212121">The University of Texas MD Anderson Cancer Center</span><span style="font-size:11.5pt;font-family:"Tahoma",sans-serif;color:#212121"><o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:#212121">(713) 745-9346</span><span style="font-size:11.5pt;font-family:"Tahoma",sans-serif;color:#212121"><o:p></o:p></span></p>
</div>
</div>
</div>
<div>
<p class="MsoNormal"><span style="font-size:11.5pt;font-family:"Tahoma",sans-serif;color:#212121"><b>Error! Filename not specified.</b><o:p></o:p></span></p>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
</div>
<div class="MsoNormal" align="center" style="text-align:center">
<hr size="2" width="98%" align="center">
</div>
<div id="divRplyFwdMsg">
<p class="MsoNormal"><b><span style="color:black">From:</span></b><span style="color:black"> gpfsug-discuss-bounces@spectrumscale.org <gpfsug-discuss-bounces@spectrumscale.org> on behalf of Buterbaugh, Kevin L <Kevin.Buterbaugh@Vanderbilt.Edu><br>
<b>Sent:</b> Wednesday, March 27, 2019 10:59:17 AM<br>
<b>To:</b> gpfsug main discussion list<br>
<b>Subject:</b> [EXT] [gpfsug-discuss] Adding to an existing GPFS ACL</span> <o:p>
</o:p></p>
<div>
<p class="MsoNormal"> <o:p></o:p></p>
</div>
</div>
<div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto;line-height:12.0pt;background:#FFEB9C">
<strong><span style="font-family:"Calibri",sans-serif;color:#9C6500">WARNING:</span></strong><span style="color:black"> This email originated from outside of MD Anderson. Please validate the sender's email address before clicking on links or attachments as
they may not be safe. </span><o:p></o:p></p>
<p class="MsoNormal">Hi All, <o:p></o:p></p>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">First off, I have very limited experience with GPFS ACL’s, so please forgive me if I’m missing something obvious here. AFAIK, this is the first time we’ve hit something like this…<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">We have a fileset where all the files / directories have GPFS NFSv4 ACL’s set on them. However, unlike most of our filesets where the same ACL is applied to every file / directory in the share, this one has different ACL’s on different
files / directories. Now we have the need to add to the existing ACL’s … another group needs access. Unlike regular Unix / Linux ACL’s where setfacl can be used to just add to an ACL (i.e. setfacl -R g:group_name:rwx), I’m not seeing where GPFS has a similar
command … i.e. mmputacl seems to expect the _entire_ new ACL to be supplied via either manual entry or an input file. That’s obviously problematic in this scenario.<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">So am I missing something? Is there an easier solution than writing a script which recurses over the fileset, gets the existing ACL with mmgetacl and outputs that to a file, edits that file to add in the new group, and passes that as input
to mmputacl? That seems very cumbersome and error prone, especially if I’m the one writing the script!<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Thanks…<o:p></o:p></p>
</div>
<div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
<div>
<p class="MsoNormal">Kevin<o:p></o:p></p>
</div>
<div>
<div>
<div>
<div>
<p class="MsoNormal"><span style="color:black">—<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Kevin Buterbaugh - Senior System Administrator<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black">Vanderbilt University - Advanced Computing Center for Research and Education<o:p></o:p></span></p>
</div>
<div>
<p class="MsoNormal"><span style="color:black"><a href="mailto:Kevin.Buterbaugh@vanderbilt.edu">Kevin.Buterbaugh@vanderbilt.edu</a> - (615)875-9633<o:p></o:p></span></p>
</div>
</div>
</div>
<p class="MsoNormal"><o:p> </o:p></p>
</div>
</div>
<p class="MsoNormal" style="mso-margin-top-alt:auto;mso-margin-bottom-alt:auto">The information contained in this e-mail message may be privileged, confidential, and/or protected from disclosure. This e-mail message may contain protected health information
(PHI); dissemination of PHI should comply with applicable federal and state laws. If you are not the intended recipient, or an authorized representative of the intended recipient, any further review, disclosure, use, dissemination, distribution, or copying
of this message or any attachment (or the information contained therein) is strictly prohibited. If you think that you have received this e-mail message in error, please notify the sender by return e-mail and delete all references to it and its contents from
your systems.<o:p></o:p></p>
</div>
</body>
</html>