<span style=" font-size:10pt;font-family:sans-serif">I think I gave an

internal link. Try this instead:</span><br><br><a href="http://www.ibm.com/support/docview.wss?uid=ibm10716323"><span style=" font-size:10pt;color:blue;font-family:sans-serif">http://www.ibm.com/support/docview.wss?uid=ibm10716323</span></a><span style=" font-size:10pt;font-family:sans-serif"><br></span><br><br><span style=" font-size:9pt;font-family:Arial"><br></span><table width=650 style="border-collapse:collapse;"><tr height=8><td width=650 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:12pt;color:#8f8f8f;font-family:Arial"><b>Nate

Falk<span style=" font-size:9pt;font-family:Arial"> IBM Spectrum Scale Level 2 Support Software Defined Infrastructure, IBM Systems</table><p style="margin-top:0px;margin-Bottom:0px"><table width=650 style="border-collapse:collapse;"><tr height=8><td width=650 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><hr><tr valign=top height=8><td width=363 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><span style=" font-size:7pt;color:#4181c0;font-family:Arial"> E-mail:<span style=" font-size:7pt;color:#5f5f5f;font-family:Arial"><a href="mailto:nfalk@us.ibm.com" target="_blank"><span style=" font-size:7pt;color:#5f5f5f;font-family:Arial">nfalk@us.ibm.com</a><span style=" font-size:7pt;color:#4181c0;font-family:Arial"> Find me on:<span style=" font-size:7pt;color:#5f5f5f;font-family:Arial"><a href="https://www.linkedin.com/in/nathan-falk-078ba5125" target="_blank"><img src=http://www.ibm.com/webaccessories/emailsig/i/LinkedIn.jpg alt="LinkedIn: https://www.linkedin.com/in/nathan-falk-078ba5125" style="border:0px solid;"></a><span style=" font-size:7pt;color:#5f5f5f;font-family:Arial"> <a href="https://twitter.com/natefalk922" target="_blank"><img src=http://www.ibm.com/webaccessories/emailsig/i/Twitter.jpg alt="Twitter: https://twitter.com/natefalk922" style="border:0px solid;"></a><span style=" font-size:7pt;color:#5f5f5f;font-family:Arial"><td width=286 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:0px 0px;"><div align=right><img align=bottom src=http://www.ibm.com/webaccessories/emailsig/i/ibm2.gif width=83 height=30 alt=IBM style="border:0px solid;"></div></table><p style="margin-top:0px;margin-Bottom:0px"> <span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">From:

       </span><span style=" font-size:9pt;font-family:sans-serif">"Nathan

Falk" <nfalk@us.ibm.com> <span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">To:

       </span><span style=" font-size:9pt;font-family:sans-serif">gpfsug

main discussion list <gpfsug-discuss@spectrumscale.org></span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Date:

       </span><span style=" font-size:9pt;font-family:sans-serif">03/27/2019

01:04 PM</span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Subject:

       </span><span style=" font-size:9pt;font-family:sans-serif">Re:

[gpfsug-discuss] Adding to an existing GPFS ACL</span><br><span style=" font-size:9pt;color:#5f5f5f;font-family:sans-serif">Sent

by:        </span><span style=" font-size:9pt;font-family:sans-serif">gpfsug-discuss-bounces@spectrumscale.org</span><br><hr noshade><br><br><br><span style=" font-size:10pt">Hello Kevin,</span><span style=" font-size:12pt"><br></span><span style=" font-size:10pt"><br>No, you're not missing something. GPFS doesn't provide a means of recursively

modifying ACLs. It's not even all that easy to just modify one ACL for

one file (it's either mmeditacl, or mmgetacl > /tmp/acl.txt; vi /tmp/acl.txt;

mmputacl -i /tmp/acl.txt).</span><span style=" font-size:12pt"><br></span><span style=" font-size:10pt"><br>I've had a few queries along these lines over the years and decided to

publish a little bit of a guide here:</span><span style=" font-size:12pt"><br></span><span style=" font-size:12pt;color:blue"><u><br></u></span><a href="https://www-prd-trops.events.ibm.com/node/how-recursively-set-nfsv4-acls-gpfs-filesystem"><span style=" font-size:12pt;color:blue"><u>https://www-prd-trops.events.ibm.com/node/how-recursively-set-nfsv4-acls-gpfs-filesystem</u></span></a><span style=" font-size:12pt"><br></span><span style=" font-size:10pt"><br>There's a sample script there for the recursive part, but that would still

have to be tweaked in your case to append just a single ACE to the existing

ACL rather than replace the whole ACL.</span><span style=" font-size:12pt"><br></span><span style=" font-size:10pt"><br>Or as others have noted, export the fileset via NFS and go to an NFS client

and use nfs4_setfacl instead.</span><span style=" font-size:12pt"><br></span><span style=" font-size:10pt"><br>Thanks,</span><span style=" font-size:9pt;font-family:Arial"><br></span><table width=650 style="border-collapse:collapse;"><tr height=8><td width=648 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><span style=" font-size:12pt;color:#8f8f8f;font-family:Arial"><b>Nate

Falk<span style=" font-size:9pt;font-family:Arial"> IBM Spectrum Scale Level 2 Support Software Defined Infrastructure, IBM Systems</table> <table width=650 style="border-collapse:collapse;"><tr height=8><td width=648 colspan=2 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><hr><tr valign=top height=8><td width=361 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><span style=" font-size:7pt;color:#4181c0;font-family:Arial"> E-mail:<a href="mailto:nfalk@us.ibm.com" target="_blank"><span style=" font-size:7pt;color:#5f5f5f;font-family:Arial">nfalk@us.ibm.com</a><span style=" font-size:7pt;color:#4181c0;font-family:Arial"> Find me on:<a href="https://www.linkedin.com/in/nathan-falk-078ba5125" target="_blank"><img src=http://www.ibm.com/webaccessories/emailsig/i/LinkedIn.jpg width=16 height=16 alt="LinkedIn: https://www.linkedin.com/in/nathan-falk-078ba5125" style="border:0px solid;"></a><span style=" font-size:7pt;color:#5f5f5f;font-family:Arial"><a href="https://twitter.com/natefalk922" target="_blank"><img src=http://www.ibm.com/webaccessories/emailsig/i/Twitter.jpg width=16 height=16 alt="Twitter: https://twitter.com/natefalk922" style="border:0px solid;"></a><td width=284 style="border-style:none none none none;border-color:#000000;border-width:0px 0px 0px 0px;padding:1px 1px;"><div align=right><img align=bottom src=http://www.ibm.com/webaccessories/emailsig/i/ibm2.gif width=83 height=30 alt=IBM style="border:0px solid;"></div></table> <span style=" font-size:12pt"> <span style=" font-size:9pt;color:#5f5f5f"> From:        <span style=" font-size:9pt">"Buterbaugh,

Kevin L" <Kevin.Buterbaugh@Vanderbilt.Edu></span><span style=" font-size:9pt;color:#5f5f5f"><br>To:        </span><span style=" font-size:9pt">gpfsug

main discussion list <gpfsug-discuss@spectrumscale.org></span><span style=" font-size:9pt;color:#5f5f5f"><br>Date:        </span><span style=" font-size:9pt">03/27/2019

12:53 PM</span><span style=" font-size:9pt;color:#5f5f5f"><br>Subject:        </span><span style=" font-size:9pt">Re:

[gpfsug-discuss] Adding to an existing GPFS ACL</span><span style=" font-size:9pt;color:#5f5f5f"><br>Sent by:        </span><span style=" font-size:9pt">gpfsug-discuss-bounces@spectrumscale.org</span><span style=" font-size:12pt"><br></span><hr noshade><span style=" font-size:12pt"><br><br><br>Hi Jonathan, <br><br>Thanks.  We have done a very similar thing when we’re dealing with

a situation where:  1) all files and directories in the fileset are

starting out with the same existing ACL, and 2) all need the same modification

made to them.<br><br>Unfortunately, in this situation item 2 is true, but item 1 is _not_.  That’s

what’s making this one a bit thorny…<br><br>Kevin<br><br>—<br>Kevin Buterbaugh - Senior System Administrator<br>Vanderbilt University - Advanced Computing Center for Research and Education</span><span style=" font-size:12pt;color:blue"><u><br></u></span><a href="mailto:Kevin.Buterbaugh@vanderbilt.edu"><span style=" font-size:12pt;color:blue"><u>Kevin.Buterbaugh@vanderbilt.edu</u></span></a><span style=" font-size:12pt">-

(615)875-9633<br><br>On Mar 27, 2019, at 11:33 AM, Fosburgh,Jonathan <</span><a href="mailto:jfosburg@mdanderson.org"><span style=" font-size:12pt;color:blue"><u>jfosburg@mdanderson.org</u></span></a><span style=" font-size:12pt">>

wrote:</span><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Calibri">I

misunderstood you.</span></p><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Calibri">Pretty

much what we've been doing is maintaining "ACL template" files

based on how our filesystem hierarchy is set up.  Basically, fileset

foo has a foo.acl file that contains what the ACL is supposed to be.  If

we need to change the ACL, we modify that file with the new ACL and then

pass it through a simple (and expensive, I'm sure) script.  This wouldn't

be necessary if in heritance flowed down on existing files and directories.

 If you have CIFS access, you can also use Windows to do this, but

it is MUCH slower.</span></p><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri"><br>-- <br>Jonathan Fosburgh<br>Principal Application Systems Analyst<br>IT Operations Storage Team<br>The University of Texas MD Anderson Cancer Center<br>(713) 745-9346</span><br><span style=" font-size:12pt"><br></span><hr><span style=" font-size:11pt;font-family:Calibri"><b><br>From:</b> </span><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>gpfsug-discuss-bounces@spectrumscale.org</u></span></a><span style=" font-size:11pt;font-family:Calibri"><</span><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>gpfsug-discuss-bounces@spectrumscale.org</u></span></a><span style=" font-size:11pt;font-family:Calibri">>

on behalf of Buterbaugh, Kevin L <</span><a href="mailto:Kevin.Buterbaugh@Vanderbilt.Edu"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>Kevin.Buterbaugh@Vanderbilt.Edu</u></span></a><span style=" font-size:11pt;font-family:Calibri">><b><br>Sent:</b> Wednesday, March 27, 2019 11:19:03 AM<b><br>To:</b> gpfsug main discussion list<b><br>Subject:</b> [EXT] Re: [gpfsug-discuss] Adding to an existing GPFS ACL</span><span style=" font-size:11pt"><br> </span><span style=" font-size:11pt;color:#806210"><b><br>WARNING:</b></span><span style=" font-size:11pt">This email originated

from outside of MD Anderson. Please validate the sender's email address

before clicking on links or attachments as they may not be safe. <br>Hi Jonathan, </span><span style=" font-size:12pt"><br></span><span style=" font-size:11pt"><br>Thanks for the response.  I did look at mmeditacl, but unless I’m

missing something it’s interactive (kind of like mmedquota is by default).

 If I had only a handful of files / directories to modify that would

be fine, but in this case there are thousands of ACL’s that need modifying.</span><span style=" font-size:12pt"><br></span><span style=" font-size:11pt"><br>Am I missing something?  Thanks…</span><span style=" font-size:12pt"><br></span><span style=" font-size:11pt"><br>Kevin</span><span style=" font-size:12pt"><br></span><span style=" font-size:11pt"><br>—<br>Kevin Buterbaugh - Senior System Administrator<br>Vanderbilt University - Advanced Computing Center for Research and Education</span><span style=" font-size:12pt;color:blue"><u><br></u></span><a href="mailto:Kevin.Buterbaugh@vanderbilt.edu"><span style=" font-size:11pt;color:blue"><u>Kevin.Buterbaugh@vanderbilt.edu</u></span></a><span style=" font-size:11pt">-

(615)875-9633</span><span style=" font-size:12pt"><br></span><span style=" font-size:11pt"><br>On Mar 27, 2019, at 11:02 AM, Fosburgh,Jonathan <</span><a href="mailto:jfosburg@mdanderson.org"><span style=" font-size:11pt;color:blue"><u>jfosburg@mdanderson.org</u></span></a><span style=" font-size:11pt">>

wrote:</span><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:12pt;font-family:Calibri">Try

mmeditacl.</span></p><br><span style=" font-size:11pt;color:#2f2f2f;font-family:Calibri"><br>-- <br>Jonathan Fosburgh<br>Principal Application Systems Analyst<br>IT Operations Storage Team<br>The University of Texas MD Anderson Cancer Center<br>(713) 745-9346</span><br><span style=" font-size:12pt"><br></span><hr><span style=" font-size:11pt;font-family:Calibri"><b><br>From:</b> </span><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>gpfsug-discuss-bounces@spectrumscale.org</u></span></a><span style=" font-size:11pt;font-family:Calibri"><</span><a href="mailto:gpfsug-discuss-bounces@spectrumscale.org"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>gpfsug-discuss-bounces@spectrumscale.org</u></span></a><span style=" font-size:11pt;font-family:Calibri">>

on behalf of Buterbaugh, Kevin L <</span><a href="mailto:Kevin.Buterbaugh@Vanderbilt.Edu"><span style=" font-size:11pt;color:blue;font-family:Calibri"><u>Kevin.Buterbaugh@Vanderbilt.Edu</u></span></a><span style=" font-size:11pt;font-family:Calibri">><b><br>Sent:</b> Wednesday, March 27, 2019 10:59:17 AM<b><br>To:</b> gpfsug main discussion list<b><br>Subject:</b> [EXT] [gpfsug-discuss] Adding to an existing GPFS ACL</span><span style=" font-size:11pt"><br> </span><span style=" font-size:11pt;color:#806210"><b><br>WARNING:</b></span><span style=" font-size:11pt">This email originated

from outside of MD Anderson. Please validate the sender's email address

before clicking on links or attachments as they may not be safe. <br>Hi All, </span><span style=" font-size:12pt"><br></span><span style=" font-size:11pt"><br>First off, I have very limited experience with GPFS ACL’s, so please forgive

me if I’m missing something obvious here.  AFAIK, this is the first

time we’ve hit something like this…</span><span style=" font-size:12pt"><br></span><span style=" font-size:11pt"><br>We have a fileset where all the files / directories have GPFS NFSv4 ACL’s

set on them.  However, unlike most of our filesets where the same

ACL is applied to every file / directory in the share, this one has different

ACL’s on different files / directories.  Now we have the need to

add to the existing ACL’s … another group needs access.  Unlike

regular Unix / Linux ACL’s where setfacl can be used to just add to an

ACL (i.e. setfacl -R g:group_name:rwx), I’m not seeing where GPFS has

a similar command … i.e. mmputacl seems to expect the _entire_ new ACL

to be supplied via either manual entry or an input file.  That’s

obviously problematic in this scenario.</span><span style=" font-size:12pt"><br></span><span style=" font-size:11pt"><br>So am I missing something?  Is there an easier solution than writing

a script which recurses over the fileset, gets the existing ACL with mmgetacl

and outputs that to a file, edits that file to add in the new group, and

passes that as input to mmputacl?  That seems very cumbersome and

error prone, especially if I’m the one writing the script!</span><span style=" font-size:12pt"><br></span><span style=" font-size:11pt"><br>Thanks…</span><span style=" font-size:12pt"><br></span><span style=" font-size:11pt"><br>Kevin<br>—<br>Kevin Buterbaugh - Senior System Administrator<br>Vanderbilt University - Advanced Computing Center for Research and Education</span><span style=" font-size:12pt;color:blue"><u><br></u></span><a href="mailto:Kevin.Buterbaugh@vanderbilt.edu"><span style=" font-size:11pt;color:blue"><u>Kevin.Buterbaugh@vanderbilt.edu</u></span></a><span style=" font-size:11pt">-

(615)875-9633</span><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:11pt">The

information contained in this e-mail message may be privileged, confidential,

and/or protected from disclosure. This e-mail message may contain protected

health information (PHI); dissemination of PHI should comply with applicable

federal and state laws. If you are not the intended recipient, or an authorized

representative of the intended recipient, any further review, disclosure,

use, dissemination, distribution, or copying of this message or any attachment

(or the information contained therein) is strictly prohibited. If you think

that you have received this e-mail message in error, please notify the

sender by return e-mail and delete all references to it and its contents

from your systems.</span></p><br><span style=" font-size:11pt"><br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at </span><a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fspectrumscale.org%2F&data=02%7C01%7CKevin.Buterbaugh%40vanderbilt.edu%7C06b6070313d74610e17208d6b2d34b57%7Cba5a7f39e3be4ab3b45067fa80faecad%7C0%7C0%7C636893017903154298&sdata=ibZ7tYAcaWNVUSXyRI4LFwF5Ys88mm4uh2zbCZcVi9Y%3D&reserved=0"><span style=" font-size:11pt;color:blue"><u>spectrumscale.org</u></span></a><span style=" font-size:12pt;color:blue"><u><br></u></span><a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgpfsug.org%2Fmailman%2Flistinfo%2Fgpfsug-discuss&data=02%7C01%7CKevin.Buterbaugh%40vanderbilt.edu%7C06b6070313d74610e17208d6b2d34b57%7Cba5a7f39e3be4ab3b45067fa80faecad%7C0%7C0%7C636893017903164307&sdata=fPDCexKWCGIaXSvjMaEz3jiPZOf35fVV%2BfR9t%2FJUhLQ%3D&reserved=0"><span style=" font-size:11pt;color:blue"><u>https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgpfsug.org%2Fmailman%2Flistinfo%2Fgpfsug-discuss&amp;data=02%7C01%7CKevin.Buterbaugh%40vanderbilt.edu%7Cb2040f23087c4aac0b4908d6b2cf11ed%7Cba5a7f39e3be4ab3b45067fa80faecad%7C0%7C1%7C636892999763011551&amp;sdata=pXhLlRfQuJ4bKfib4bQBlWY4OP5WoZh1YQ%2Bjne2ycEY%3D&amp;reserved=0</u></span></a><p style="margin-top:0px;margin-Bottom:0px"><span style=" font-size:11pt">The

information contained in this e-mail message may be privileged, confidential,

and/or protected from disclosure. This e-mail message may contain protected

health information (PHI); dissemination of PHI should comply with applicable

federal and state laws. If you are not the intended recipient, or an authorized

representative of the intended recipient, any further review, disclosure,

use, dissemination, distribution, or copying of this message or any attachment

(or the information contained therein) is strictly prohibited. If you think

that you have received this e-mail message in error, please notify the

sender by return e-mail and delete all references to it and its contents

from your systems.</span></p><br><span style=" font-size:11pt"><br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at </span><a href="http://spectrumscale.org/"><span style=" font-size:11pt;color:blue"><u>spectrumscale.org</u></span></a><span style=" font-size:12pt;color:blue"><u><br></u></span><a href="https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgpfsug.org%2Fmailman%2Flistinfo%2Fgpfsug-discuss&data=02%7C01%7CKevin.Buterbaugh%40vanderbilt.edu%7C06b6070313d74610e17208d6b2d34b57%7Cba5a7f39e3be4ab3b45067fa80faecad%7C0%7C1%7C636893017903174312&sdata=OX51kSL5fs8CqW9u0y7MK1omYGqkx%2F3K%2Bwvn9iKjFM8%3D&reserved=0"><span style=" font-size:11pt;color:blue"><u>https://nam04.safelinks.protection.outlook.com/?url=http%3A%2F%2Fgpfsug.org%2Fmailman%2Flistinfo%2Fgpfsug-discuss&amp;data=02%7C01%7CKevin.Buterbaugh%40vanderbilt.edu%7C06b6070313d74610e17208d6b2d34b57%7Cba5a7f39e3be4ab3b45067fa80faecad%7C0%7C1%7C636893017903174312&amp;sdata=OX51kSL5fs8CqW9u0y7MK1omYGqkx%2F3K%2Bwvn9iKjFM8%3D&amp;reserved=0</u></span></a><span style=" font-size:12pt"><br></span><tt><span style=" font-size:10pt"><br>_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org</span></tt><span style=" font-size:12pt;color:blue"><u><br></u></span><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><tt><span style=" font-size:10pt;color:blue"><u>http://gpfsug.org/mailman/listinfo/gpfsug-discuss</u></span></tt></a><span style=" font-size:12pt"><br><br><br></span><br><tt><span style=" font-size:10pt">_______________________________________________<br>gpfsug-discuss mailing list<br>gpfsug-discuss at spectrumscale.org<br></span></tt><a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss"><tt><span style=" font-size:10pt">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</span></tt></a><tt><span style=" font-size:10pt"><br></span></tt><br><br><BR>