[gpfsug-discuss] mmsmb exportacl remove - syntax changed?

[Sobey, Richard A]

I’m sorry, you’re right. I can only assume my brain was looking for an SID entry so when I saw Everyone:ALLOWED/FULL it didn’t process it at all.

4.2.3-4:
[root at cesnode ~]# mmsmb exportacl list

[testces]
ACL:\Everyone:ALLOWED/FULL

From: gpfsug-discuss-bounces at spectrumscale.org [mailto:gpfsug-discuss-bounces at spectrumscale.org] On Behalf Of Christof Schmitt
Sent: 26 September 2017 21:49
To: gpfsug-discuss at spectrumscale.org
Subject: Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?

The default for the "export ACL" is always to allow access to "Everyone", so that the the "export ACL" does not limit access by default, but only the file system ACL. I do not have systems with these code levels at hand, could you show the difference you see between PTF2 and PTF4?

Regards,

Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ
christof.schmitt at us.ibm.com<mailto:christof.schmitt at us.ibm.com>  ||  +1-520-799-2469    (T/L: 321-2469)


----- Original message -----
From: "Sobey, Richard A" <r.sobey at imperial.ac.uk<mailto:r.sobey at imperial.ac.uk>>
Sent by: gpfsug-discuss-bounces at spectrumscale.org<mailto:gpfsug-discuss-bounces at spectrumscale.org>
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org<mailto:gpfsug-discuss at spectrumscale.org>>
Cc: "gpfsug-discuss at gpfsug.org<mailto:gpfsug-discuss at gpfsug.org>" <gpfsug-discuss at gpfsug.org<mailto:gpfsug-discuss at gpfsug.org>>
Subject: Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?
Date: Tue, Sep 26, 2017 2:59 AM


There isn’t a default ACL being applied to the export at all now, which is fine, but it differs from the behaviour in 4.2.3 PTF2.



Thanks

Richard



From: gpfsug-discuss-bounces at spectrumscale.org<mailto:gpfsug-discuss-bounces at spectrumscale.org> [mailto:gpfsug-discuss-bounces at spectrumscale.org] On Behalf Of Sobey, Richard A
Sent: 26 September 2017 09:22
To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org<mailto:gpfsug-discuss at spectrumscale.org>>
Cc: gpfsug-discuss at gpfsug.org<mailto:gpfsug-discuss at gpfsug.org>
Subject: Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?



Hi Christof,  thanks I’ll try it on a test cluster.



Richard



From: gpfsug-discuss-bounces at spectrumscale.org<mailto:gpfsug-discuss-bounces at spectrumscale.org> [mailto:gpfsug-discuss-bounces at spectrumscale.org] On Behalf Of Christof Schmitt
Sent: 25 September 2017 22:41
To: gpfsug-discuss at spectrumscale.org<mailto:gpfsug-discuss at spectrumscale.org>
Cc: gpfsug-discuss at gpfsug.org<mailto:gpfsug-discuss at gpfsug.org>
Subject: Re: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?



4.2.3 PTF4 seems to have a fix for this area. Can you try again with that PTF installed?

Christof Schmitt || IBM || Spectrum Scale Development || Tucson, AZ
christof.schmitt at us.ibm.com<mailto:christof.schmitt at us.ibm.com>  ||  +1-520-799-2469    (T/L: 321-2469)





----- Original message -----
From: "Sobey, Richard A" <r.sobey at imperial.ac.uk<mailto:r.sobey at imperial.ac.uk>>
Sent by: gpfsug-discuss-bounces at spectrumscale.org<mailto:gpfsug-discuss-bounces at spectrumscale.org>
To: "gpfsug-discuss at gpfsug.org<mailto:gpfsug-discuss at gpfsug.org>" <gpfsug-discuss at gpfsug.org<mailto:gpfsug-discuss at gpfsug.org>>
Cc:
Subject: [gpfsug-discuss] mmsmb exportacl remove - syntax changed?
Date: Mon, Sep 25, 2017 7:35 AM


Hi all,



This used to work (removing a SID from an ACL), but doesn't any more. Looks like a bug unless I'm being stupid.



[root at cesnode<file:///root@c>~]# mmsmb exportacl list neuroscience2 --viewsids



[neuroscience2]

REVISION:1

ACL:S-1-1-0:ALLOWED/FULL





[root at cesnode<file:///root@ce> ~] mmsmb exportacl remove neuroscience2 --SID S-1-1-0

mmsmb exportacl remove: Incorrect option: --sid

Usage:

mmsmb exportacl remove ExportName {Name | --user UserName | --group GroupName | --system SystemName | --SID SID} [--access Access] [--permissions Permissions] [--viewsddl] [--viewsids] [-h|--help]

      where:

Access is one of ALLOWED, DENIED

      Permissions is one of FULL, CHANGE, READ or any combination of RWXDPO



I've tried lower case SID i.e --sid, and specifying --access ALLOWED and --permissions FULL.



Omitting the --SID argument entirely simply results in GPFS telling me I must specify a Name or an SID.



[root at cesnode<file:///root@c>~]# mmsmb exportacl remove neuroscience2 --access ALLOWED --permissions FULL

[E] The mmsmb exportacl remove command requires a Name or SID.



Can anyone see my mistake?



Richard





_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=5Nn7eUPeYe291x8f39jKybESLKv_W_XtkTkS8fTR-NI&m=c3uTUNFbPTWWcTNUNVVejlQ0xdnhBAfQdouTBlVgnjc&s=hsWeRhH-BhTEaAlrTPbJGlwCV-5Ui7t03Zcec9kywOA&e=




_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at spectrumscale.org
https://urldefense.proofpoint.com/v2/url?u=http-3A__gpfsug.org_mailman_listinfo_gpfsug-2Ddiscuss&d=DwICAg&c=jf_iaSHvJObTbx-siA1ZOg&r=5Nn7eUPeYe291x8f39jKybESLKv_W_XtkTkS8fTR-NI&m=B-AqKIRCmLBzoWAhGn7NY-ZASOX25NuP_c_ndE8gy4A&s=S06OD3mbRedYjfwETO8tUnlOjnWT7pOX8nsYX5ebIdA&e=


-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20170927/b11f5615/attachment-0002.htm>