[gpfsug-discuss] Samba Export Anomalies

[Konstantin Arnold]

Hi Luke,

probably I don't have enough information about your AFM setup but maybe
you could check the ACLs on the export as well as ACLs on the directory
to be mounted. If you are using AFM from a home location that has ACLs
set then they will also be transferred to cache location.
(We ran into similar issues when we had to take over data from a SONAS
system that was assigning gid_numbers from an internal mapping table -
all had to be cleaned up first before clients could have access through
our CES system.)

Best
Konstantin



On 07/05/2016 04:25 PM, Luke Raimbach wrote:
> Hi All,
> 
> I'm having a frustrating time exporting an Independent Writer AFM fileset through Samba.
> 
> Native GPFS directories exported through Samba seem to work properly, but when creating an export which points to an AFM IW fileset, I get "Access Denied" errors when trying to create files from an SMB client and even more unusual "Failed to enumerate objects in the container: Access is denied." messages if I try to modify the Access Control Entries through a Windows client.
> 
> Here is the smb.conf file:
> 
> ***[BEGIN smb.conf]***
> 
> [global]
>         idmap config *      : backend = autorid
>         idmap config *      : range = 100000-999999
>         idmap config THECRICK : backend = ad
>         idmap config THECRICK : schema_mode = rfc2307
>         idmap config THECRICK : range = 30000000-31999999
>         local master = no
>         realm = THECRICK.ORG
>         security = ADS
>         aio read size = 1
>         aio write size = 1
>         async smb echo handler = yes
>         clustering = yes
>         ctdbd socket = /var/run/ctdb/ctdbd.socket
>         ea support = yes
>         force unknown acl user = yes
>         level2 oplocks = no
>         log file = /var/log/samba/log.%m
>         log level = 3
>         map hidden = yes
>         map readonly = no
>         netbios name = MS_GENERAL
>         printcap name = /etc/printcap
>         printing = lprng
>         server string = Samba Server Version %v
>         socket options = TCP_NODELAY SO_KEEPALIVE TCP_KEEPCNT=4 TCP_KEEPIDLE=240 TCP_KEEPINTVL=15
>         store dos attributes = yes
>         strict allocate = yes
>         strict locking = no
>         unix extensions = no
>         vfs objects = shadow_copy2 syncops fileid streams_xattr gpfs
>                 gpfs:dfreequota = yes
>                 gpfs:hsm = yes
>                 gpfs:leases = yes
>                 gpfs:prealloc = yes
>                 gpfs:sharemodes = yes
>                 gpfs:winattr = yes
>                 nfs4:acedup = merge
>                 nfs4:chown = yes
>                 nfs4:mode = simple
>                 notify:inotify = yes
>                 shadow:fixinodes = yes
>                 shadow:format = @GMT-%Y.%m.%d-%H.%M.%S
>                 shadow:snapdir = .snapshots
>                 shadow:snapdirseverywhere = yes
>                 shadow:sort = desc
>                 smbd:backgroundqueue = false
>                 smbd:search ask sharemode = false
>                 syncops:onmeta = no
>         workgroup = THECRICK
>         winbind enum groups = yes
>         winbind enum users = yes
> 
> [production_rw]
>         comment = Production writable
>         path = /general/production
>         read only = no
> 
> [stp-test]
>         comment = STP Test Export
>         path = /general/export/stp/stp-test
>         read-only = no
> 
> ***[END smb.conf]***
> 
> 
> The [production_rw] export is a test directory on the /general filesystem which works from an SMB client. The [stp-test] export is an AFM fileset on the /general filesystem which is a cache of a directory in another GPFS filesystem:
> 
> 
> ***[BEGIN mmlsfileset general crick.general.export.stp.stp-test --afm -L]***
> 
> Attributes for fileset crick.general.export.stp.stp-test:
> ==========================================================
> Status                                  Linked
> Path                                    /general/export/stp/stp-test
> Id                                      1
> Root inode                              1048579
> Parent Id                               0
> Created                                 Fri Jul  1 15:56:48 2016
> Comment
> Inode space                             1
> Maximum number of inodes                200000
> Allocated inodes                        100000
> Permission change flag                  chmodAndSetacl
> afm-associated                          Yes
> Target                                  gpfs:///camp/stp/stp-test
> Mode                                    independent-writer
> File Lookup Refresh Interval            30 (default)
> File Open Refresh Interval              30 (default)
> Dir Lookup Refresh Interval             60 (default)
> Dir Open Refresh Interval               60 (default)
> Async Delay                             15 (default)
> Last pSnapId                            0
> Display Home Snapshots                  no
> Number of Gateway Flush Threads         4
> Prefetch Threshold                      0 (default)
> Eviction Enabled                        yes (default)
> 
> ***[END mmlsfileset general crick.general.export.stp.stp-test --afm -L]***
> 
> 
> Anyone spot any glaringly obvious misconfigurations?
> 
> Cheers,
> Luke.
> 
> Luke Raimbach​
> Senior HPC Data and Storage Systems Engineer,
> The Francis Crick Institute,
> Gibbs Building,
> 215 Euston Road,
> London NW1 2BE.
> 
> E: luke.raimbach at crick.ac.uk
> W: www.crick.ac.uk
> 
> The Francis Crick Institute Limited is a registered charity in England and Wales no. 1140062 and a company registered in England and Wales no. 06885462, with its registered office at 215 Euston Road, London NW1 2BE.
> _______________________________________________
> gpfsug-discuss mailing list
> gpfsug-discuss at spectrumscale.org
> http://gpfsug.org/mailman/listinfo/gpfsug-discuss
>