Hi Brian, I've tried to export a kernel mount via Samba with AD. I can read files but I cannot write files~~~~>< It shows the acl errors when writing files. As you said, it may need to store Windows ACLs in xattrs with the acl_xattr VFS module, which is currently available in Samba. I am not sure if this error is what you mean. If it is, the acl thing is available in Samba now, then why this error shows? This confuses me a lot.....>< Thanks~~~~^^ 2011/6/2 Brian Chrisman <brchrisman@xxxxxxxxx>: > On Wed, Jun 1, 2011 at 11:54 PM, Sylar Shen <kimulaaa@xxxxxxxxx> wrote: >> Hi Brian, >> Thanks for the information. >> Please allow me to confirm what you said. >> You're saying that general samba server worked well with Ceph. >> But It's not OK to integrate with Windows Active Directory right now >> because the acl_xattr VFS of Ceph is different from normal samba >> server. > > I simply haven't tested this yet. ÂYou might try exporting a kernel or > fuse mount via Samba with AD and see how it goes. ÂI'm expecting it > will need to store Windows ACLs in xattrs with the acl_xattr VFS > module, which is currently available in Samba, but I haven't yet > tested this configuration. > > There will be an announcement here when a ceph-VFS layer is available. > > I hope that helps clear things up. > > >> I don't know if I am right or not about what you said. >> Please correct me if anything is wrong. >> >> If the function of integrating with Windows AD is not ready yet. >> May I know when this will work, please? >> >> Thanks~~~~^^ >> >> 2011/6/2 Brian Chrisman <brchrisman@xxxxxxxxx>: >>> I have tested that Samba does work over a cfuse or kernel mount point. >>> I only tested basic functionality via a dedicated user account (not AD). >>> We'll soon be testing with AD and the acl_xattr VFS layer which stores >>> Windows ACLs on each file in the filesystem under the 'user.NTACL' >>> xattr as a blob. >>> That's largely independent of the ceph VFS module we're preparing, >>> which will keep this all in userspace. >>> >>> On Wed, Jun 1, 2011 at 7:33 PM, Sylar Shen <kimulaaa@xxxxxxxxx> wrote: >>>> Dear Brian and Gregory, >>>> Thanks for your information about samba of Ceph. >>>> I am trying to use a Ceph client to mount Ceph DFS(/mnt/cephfs/) and >>>> set up a samba server to share the mount point(/mnt/cephfs/) to >>>> Windows 2008 AD. >>>> (Yes, I would like to integrate Windows Active Directory with a samba >>>> server which is also a Ceph client) >>>> However, I encountered one problem while doing so......>< >>>> I cannot write or upload files via samba although the read function is OK. >>>> Originally, I think I can fix it by changing /etc/fstab/ settings >>>> like...... "monitor_IP:/    /mnt/cephfs/   Âbtrfs >>>> defaults,acl  Â1 2" >>>> But it's not working.......and I don't know how to solve this acl >>>> problem at all....... >>>> Brian said he is working on this. Does that mean I cannot just set up >>>> a samba server to share a Ceph mount point to Windows AD now? >>>> Maybe I have to wait until the function of re-export samba is finished? >>>> Thanks for your kindness to reply~~^^ >>>> >>>> 2011/6/1 Brian Chrisman <brchrisman@xxxxxxxxx> >>>>> >>>>> On Tue, May 31, 2011 at 9:17 AM, Gregory Farnum <gregf@xxxxxxxxxxxxxxx> wrote: >>>>> > On Sat, May 28, 2011 at 7:45 PM, Sylar Shen <kimulaaa@xxxxxxxxx> wrote: >>>>> >> Hi Gregory, >>>>> >> Thanks for your information very much! >>>>> >> By the way, the test of re-exporting NFS I did worked not bad. >>>>> >> And I am wondering since Ceph can re-export NFS, then can Ceph >>>>> >> re-export SAMBA that connects to windows? >>>>> > We don't have a samba re-export functionality, although you can just >>>>> > run samba on a Ceph mount if you like. And I think bchrisman is >>>>> > working on one, but you'd have to ask him about that. :) >>>>> >>>>> >>>>> Richard Sharpe and I have a VFS layer integrating Ceph (libceph) with >>>>> Samba that is just a stone's throw from basic functionality. >>>>> Current status: >>>>> mount/init, stat, opendir, readdir, and a few other operations are working. >>>>> We're chasing down what appears to be a few smaller problems related >>>>> to read/write. >>>>> We've also used to the acl_xattr module to avoid doing a bunch of acl >>>>> translations, though we could probably hit that in a second pass. >>>>> One future critical issue here is going to be the caching mechanism >>>>> and how it works with Samba's process model (process per connection). >>>>> This merits a discussion about how multiple libceph clients will work >>>>> together when run on the same host. >>>>> >>>>> > -Greg >>>>> > -- >>>>> > To unsubscribe from this list: send the line "unsubscribe ceph-devel" in >>>>> > the body of a message to majordomo@xxxxxxxxxxxxxxx >>>>> > More majordomo info at Âhttp://vger.kernel.org/majordomo-info.html >>>>> > >>>> >>>> >>>> >>>> -- >>>> Best Regards, >>>> Sylar Shen >>>> >>> >> >> >> >> -- >> Best Regards, >> Sylar Shen >> > -- Best Regards, Sylar Shen -- To unsubscribe from this list: send the line "unsubscribe ceph-devel" in the body of a message to majordomo@xxxxxxxxxxxxxxx More majordomo info at http://vger.kernel.org/majordomo-info.html