<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=iso-8859-1">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<div>I'm not 100% sure this is that it is, but it is most likely your ACL config. If you have to use the nfsv4 ACLs, check in mmlsconfig to make sure you are only using nfsv4 ACLs. I think the options are posix, nfsv4, and both. I would guess you are set to
both.<br>
<br>
--<br>
Jonathan Fosburgh<br>
Principal Application Systems Analyst<br>
IT Operations Storage Team<br>
The University of Texas MD Anderson Cancer Center<br>
(713) 745-9346<br>
<br>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> gpfsug-discuss-bounces@spectrumscale.org <gpfsug-discuss-bounces@spectrumscale.org> on behalf of Rehs, Philipp Helo <Philipp.Rehs@uni-duesseldorf.de><br>
<b>Sent:</b> Wednesday, May 15, 2019 3:48:19 AM<br>
<b>To:</b> gpfsug-discuss@spectrumscale.org<br>
<b>Subject:</b> [EXT] [gpfsug-discuss] Enforce ACLs</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">Hello,<br>
<br>
we are using GPFS 4.2.3 and at the moment we are looking into acls and<br>
inheritance.<br>
<br>
I have the following acls on a directory:<br>
#NFSv4 ACL<br>
#owner:root<br>
#group:root<br>
special:owner@:rwxc:allow:FileInherit:DirInherit<br>
(X)READ/LIST (X)WRITE/CREATE (X)APPEND/MKDIR (X)SYNCHRONIZE<br>
(X)READ_ACL (X)READ_ATTR (X)READ_NAMED<br>
(-)DELETE (X)DELETE_CHILD (X)CHOWN (X)EXEC/SEARCH<br>
(X)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED<br>
<br>
special:group@:r-x-:allow:FileInherit:DirInherit<br>
(X)READ/LIST (-)WRITE/CREATE (-)APPEND/MKDIR (X)SYNCHRONIZE<br>
(X)READ_ACL (X)READ_ATTR (X)READ_NAMED<br>
(-)DELETE (-)DELETE_CHILD (-)CHOWN (X)EXEC/SEARCH (-<br>
)WRITE_ACL (-)WRITE_ATTR (-)WRITE_NAMED<br>
<br>
special:everyone@:----:allow:FileInherit:DirInherit<br>
(-)READ/LIST (-)WRITE/CREATE (-)APPEND/MKDIR (-)SYNCHRONIZE (-<br>
)READ_ACL (-)READ_ATTR (-)READ_NAMED<br>
(-)DELETE (-)DELETE_CHILD (-)CHOWN (-)EXEC/SEARCH (-<br>
)WRITE_ACL (-)WRITE_ATTR (-)WRITE_NAMED<br>
<br>
user:userABC:rwx-:allow:FileInherit:DirInherit<br>
(X)READ/LIST (X)WRITE/CREATE (X)APPEND/MKDIR (X)SYNCHRONIZE<br>
(X)READ_ACL (X)READ_ATTR (X)READ_NAMED<br>
(X)DELETE (X)DELETE_CHILD (-)CHOWN (X)EXEC/SEARCH (-<br>
)WRITE_ACL (X)WRITE_ATTR (X)WRITE_NAMED<br>
<br>
<br>
<br>
Then the user creates a new folder in this directory and it does not<br>
get the same acl but normal unix permissions.<br>
Is there any way to enforce the new permissions from the parent?<br>
<br>
Kind regards<br>
Philipp<br>
<br>
-- <br>
Heinrich-Heine-Universität Düsseldorf<br>
Zentrum für Informations- und Medientechnologie<br>
Kompetenzzentrum für wissenschaftliches Rechnen und Speichern<br>
<br>
Universitätsstraße 1<br>
Gebäude 25.41<br>
Raum 00.51<br>
<br>
Telefon: +49-211-81-15557<br>
Mail: Philipp.Rehs@uni-duesseldorf.de<br>
</div>
</span></font>
<p class="MsoNormal">The information contained in this e-mail message may be
privileged, confidential, and/or protected from disclosure. This e-mail message
may contain protected health information (PHI); dissemination of PHI should
comply with applicable federal and state laws. If you are not the intended recipient,
or an authorized representative of the intended recipient, any further review,
disclosure, use, dissemination, distribution, or copying of this message or any
attachment (or the information contained therein) is strictly prohibited. If
you think that you have received this e-mail message in error, please notify
the sender by return e-mail and delete all references to it and its contents
from your systems.<o:p></o:p></p></body>
</html>