[Acl-Devel] NFSv4 default ACL

[Andreas Gruenbacher]

On Thursday, 31 August 2006 13:47, Andre Roth wrote:
> Hello,
>
> Basically I just need to set ACLs on the NFSv4 mount. No matter how or
> with which tool..
>
> > There's some simple CITI tool, and
> > http://www.suse.de/~agruen/nfs4acl/ has a user-space tool that is
> > based on a slightly different attribute format. If all goes well,
> > we'll converge at some point...
>
> I tried just this tool, but I get:
>
> joe at server ~ $ mkdir test
> joe at server ~ $ /usr/local/bin/nfs4acl --set "alice:rwx:fd:allow" test
> test: Operation not supported

Yes. The tool does not use the system.nfs4_acl attribute that the current 
NFSv4 client code implements, and the attribute formats are different. That's 
wat I meant with "tool that is based on a slightly different attribute 
format".

No code to change the NFSv4 client over to the system.nfs4acl attribute has 
been written so far, and there are a few details of where and hot to do the 
required ID<=>name mapping for users and groups.

If you are interested in working on fixing that, a helping hand would be very 
welcome ;-)

There is supposed to be some simple CITI tool that supports system.nfs4_acl 
attributes. (It may be intended for debugging purposes only.)

Andreas