[gpfsug-discuss] Quick survey: ACL Posix vs NFS V4

[Frederik Ferner]

On 10/10/18 22:57, Fabrice Cantos wrote:
> I would be interested to know what you chose for your filesystems and 
> user/project space directories:
> 
>   * Traditional Posix ACL
>   * NFS V4 ACL

We use traditional Posix ACLs almost exclusively.

The main exception is some directories on Spectrum Scale where Windows 
machines with native Spectrum Scale support create files and 
directories. There our scripts set Posix ACLs which are respected on 
Windows but automatically converted to NFS V4 ACLs on new files and 
directories by the file system.

> What did motivate your choice?

Mainly that our use of ACLs goes back way longer than our use of 
GPFS/Spectrum Scale and we also have other file systems which do not 
support NFSv4 ACLs. Keeping knowledge and script on one set of ACLs 
fresh within the team is easier. Additional headache comes because as we 
all know Posix ACLs and NFS V4 ACLs don't translate exactly.


> We are facing some issues to get the correct NFS ACL to keep correct 
> attributes for new files created.

Is this using kernel NFSd or Ganesha (CES)?

Frederik
-- 
Frederik Ferner
Senior Computer Systems Administrator (storage) phone: +44 1235 77 8624
Diamond Light Source Ltd.                       mob:   +44 7917 08 5110

Duty Sys Admin can be reached on x8596


(Apologies in advance for the lines below. Some bits are a legal
requirement and I have no control over them.)

-- 
This e-mail and any attachments may contain confidential, copyright and or privileged material, and are for the use of the intended addressee only. If you are not the intended addressee or an authorised recipient of the addressee please notify us of receipt by returning the e-mail and do not use, copy, retain, distribute or disclose the information in or attached to the e-mail.
Any opinions expressed within this e-mail are those of the individual and not necessarily of Diamond Light Source Ltd. 
Diamond Light Source Ltd. cannot guarantee that this e-mail or any attachments are free from viruses and we cannot accept liability for any damage which you may sustain as a result of software viruses which may be transmitted in or with the message.
Diamond Light Source Limited (company no. 4375679). Registered in England and Wales with its registered office at Diamond House, Harwell Science and Innovation Campus, Didcot, Oxfordshire, OX11 0DE, United Kingdom