9:05 a.m.
I'm trying to figure out why ganesha is not honoring the nfsv4 acl
On the backend filesystem the NFSv4 seems to be properly configured:
# nfs4_getfacl /hyperfile/volumes/1/6_1/dir_1
A::andrea:rwaxtTnNcCy
However, on the NFS client user "andrea" can't access the directory
$ mount -v | grep nfs
10.130.42.92:/vol1 on /mnt type nfs4
(rw,relatime,vers=4.2,rsize=1048576,wsize=1048576,namlen=255,hard,proto=tcp,timeo=600,retrans=2,sec=sys,clientaddr=10.50.50.37,local_lock=none,addr=10.130.42.92)
$ cd /mnt/dir_1
-bash: cd: /mnt/dir_1: Permission denied
The UID for andrea is the same on NFS client and NFS ganesha server.
I have enabled debug logs in Ganesha, but it doesn't say much to me (I have grepped
for ACL)
3/10/2021 13:53:15 : epoch 6166dd9b : hf-frontend-1-1-699f6cb8cf-gmlqp :
nfs-ganesha-124687[svc_56] nfs_access_op :NFS3 :DEBUG :access_mask = mode(rwx)
ACL(list_dir,add_file,execute,add_subdirectory,delete_child)
13/10/2021 13:53:15 : epoch 6166dd9b : hf-frontend-1-1-699f6cb8cf-gmlqp :
nfs-ganesha-124687[svc_56] fsal_check_access_no_acl :NFS4 ACL :F_DBG :file Mode=0777, file
uid=0, file gid= 0, user uid=10001, user gid= 10002, access_type=0X7000000
13/10/2021 13:53:15 : epoch 6166dd9b : hf-frontend-1-1-699f6cb8cf-gmlqp :
nfs-ganesha-124687[svc_56] fsal_check_access_no_acl :NFS4 ACL :F_DBG :Mask=0X7000000,
Access Type=0X7000000 Allowed=0X7000000 Denied=0X0 ALLOWED
13/10/2021 13:53:15 : epoch 6166dd9b : hf-frontend-1-1-699f6cb8cf-gmlqp :
nfs-ganesha-124687[svc_56] file_To_Fattr :NFS4 ACL :DEBUG :No permission check for ACL for
obj 0x563029ad02f8
13/10/2021 13:53:15 : epoch 6166dd9b : hf-frontend-1-1-699f6cb8cf-gmlqp :
nfs-ganesha-124687[svc_53] fsal_check_access_no_acl :NFS4 ACL :F_DBG :file Mode=0777, file
uid=0, file gid= 0, user uid=10001, user gid= 10002, access_type=0X1000000
13/10/2021 13:53:15 : epoch 6166dd9b : hf-frontend-1-1-699f6cb8cf-gmlqp :
nfs-ganesha-124687[svc_53] fsal_check_access_no_acl :NFS4 ACL :F_DBG :Mask=0X7000000,
Access Type=0X1000000 Allowed=0X1000000 Denied=0X0 ALLOWED
13/10/2021 13:53:15 : epoch 6166dd9b : hf-frontend-1-1-699f6cb8cf-gmlqp :
nfs-ganesha-124687[svc_53] file_To_Fattr :NFS4 ACL :DEBUG :No permission check for ACL for
obj 0x7f7ca4003748
13/10/2021 13:53:15 : epoch 6166dd9b : hf-frontend-1-1-699f6cb8cf-gmlqp :
nfs-ganesha-124687[svc_57] nfs_access_op :NFS3 :DEBUG :access_mask = mode(rwx)
ACL(list_dir,add_file,execute,add_subdirectory,delete_child)
13/10/2021 13:53:15 : epoch 6166dd9b : hf-frontend-1-1-699f6cb8cf-gmlqp :
nfs-ganesha-124687[svc_57] fsal_check_access_no_acl :NFS4 ACL :F_DBG :file Mode=0, file
uid=0, file gid= 0, user uid=10001, user gid= 10002, access_type=0X7000000
13/10/2021 13:53:15 : epoch 6166dd9b : hf-frontend-1-1-699f6cb8cf-gmlqp :
nfs-ganesha-124687[svc_57] fsal_check_access_no_acl :NFS4 ACL :F_DBG :Mask=0X0, Access
Type=0X7000000 Allowed=0X0 Denied=0X7000000 DENIED
13/10/2021 13:53:15 : epoch 6166dd9b : hf-frontend-1-1-699f6cb8cf-gmlqp :
nfs-ganesha-124687[svc_57] file_To_Fattr :NFS4 ACL :DEBUG :No permission check for ACL for
obj 0x7f7ca4003748