If you use the next branch the recovery directory is now configurable. What FSAL are you using? FSAL_VFS depends on name_to_handle_at and open_by_handle both of which require a CAP. There may be a few other CAPs necessary. Also, you will have to squash all users to the user running Ganesha since Ganesha won't be able to seteuid/setegid to act as other users. These problems are less of an issue for other FSALs. Frank
-----Original Message----- From: Tom McLaughlin [mailto:pyro777@gmail.com] Sent: Wednesday, June 16, 2021 6:04 PM To: support@lists.nfs-ganesha.org Subject: [NFS-Ganesha-Support] Re: Possible to run NFSv4 server as non-root user?
Okay, now I have some real errors:
16/06/2021 17:58:47 : epoch 60ca9d4a : tom-7590 : ganesha.nfsd- 1006530[svc_24] fsal_common_is_referral :FSAL :EVENT :Failed to get attrs for referral, handle: 0x7f90bda3cc00, valid_mask: 0, request_mask: 82, supported: 0, error: Forbidden action 16/06/2021 17:58:47 : epoch 60ca9d4a : tom-7590 : ganesha.nfsd- 1006530[svc_24] fsal_common_is_referral :FSAL :EVENT :Failed to get attrs for referral, handle: 0x7f90bda3cc00, valid_mask: 0, request_mask: 82, supported: 0, error: Forbidden action 16/06/2021 17:58:47 : epoch 60ca9d4a : tom-7590 : ganesha.nfsd- 1006530[svc_5] fs_rm_revoked_handles :CLIENT ID :EVENT :opendir /var/lib/nfs/ganesha/v4recov/node0/::ffff:127.0.0.1-(22:Linux NFSv4.2 tom- 7590) failed errno: Permission denied (13) 16/06/2021 17:58:47 : epoch 60ca9d4a : tom-7590 : ganesha.nfsd- 1006530[svc_5] fs_rm_clid_impl :CLIENT ID :EVENT :Failed to remove client recovery dir (/var/lib/nfs/ganesha/v4recov/node0/::ffff:127.0.0.1-(22:Linux NFSv4.2 tom-7590)), errno: Permission denied (13)
For the second two errors, it seems I need to change where the client recovery dir is kept to something user-accessible. I can't seem to find an option for this though.
Not sure what to do about "Failed to get attrs for referral"? _______________________________________________ Support mailing list -- support@lists.nfs-ganesha.org To unsubscribe send an email to support-leave@lists.nfs-ganesha.org