10:28 p.m.
If you use the next branch the recovery directory is now configurable.
What FSAL are you using? FSAL_VFS depends on name_to_handle_at and open_by_handle both of
which require a CAP. There may be a few other CAPs necessary. Also, you will have to
squash all users to the user running Ganesha since Ganesha won't be able to
seteuid/setegid to act as other users. These problems are less of an issue for other
FSALs.
Frank
-----Original Message-----
From: Tom McLaughlin [mailto:pyro777@gmail.com]
Sent: Wednesday, June 16, 2021 6:04 PM
To: support(a)lists.nfs-ganesha.org
Subject: [NFS-Ganesha-Support] Re: Possible to run NFSv4 server as non-root
user?
Okay, now I have some real errors:
16/06/2021 17:58:47 : epoch 60ca9d4a : tom-7590 : ganesha.nfsd-
1006530[svc_24] fsal_common_is_referral :FSAL :EVENT :Failed to get attrs for
referral, handle: 0x7f90bda3cc00, valid_mask: 0, request_mask: 82, supported:
0, error: Forbidden action
16/06/2021 17:58:47 : epoch 60ca9d4a : tom-7590 : ganesha.nfsd-
1006530[svc_24] fsal_common_is_referral :FSAL :EVENT :Failed to get attrs for
referral, handle: 0x7f90bda3cc00, valid_mask: 0, request_mask: 82, supported:
0, error: Forbidden action
16/06/2021 17:58:47 : epoch 60ca9d4a : tom-7590 : ganesha.nfsd-
1006530[svc_5] fs_rm_revoked_handles :CLIENT ID :EVENT :opendir
/var/lib/nfs/ganesha/v4recov/node0/::ffff:127.0.0.1-(22:Linux NFSv4.2 tom-
7590) failed errno: Permission denied (13)
16/06/2021 17:58:47 : epoch 60ca9d4a : tom-7590 : ganesha.nfsd-
1006530[svc_5] fs_rm_clid_impl :CLIENT ID :EVENT :Failed to remove client
recovery dir (/var/lib/nfs/ganesha/v4recov/node0/::ffff:127.0.0.1-(22:Linux
NFSv4.2 tom-7590)), errno: Permission denied (13)
For the second two errors, it seems I need to change where the client recovery
dir is kept to something user-accessible. I can't seem to find an option for this
though.
Not sure what to do about "Failed to get attrs for referral"?
_______________________________________________
Support mailing list -- support(a)lists.nfs-ganesha.org To unsubscribe send an
email to support-leave(a)lists.nfs-ganesha.org