Re: CephFS Fuse ACLs

[Brady Deetz <bdeetz@xxxxxxxxx>]

apparently fuse_default_permission and client_acl_type have to be in the fstab entry instead of the ceph.conf.

Sorry for polluting the mailing list with an amateur mis-configuration.

On Thu, Aug 18, 2016 at 4:26 PM, Brady Deetz <bdeetz@xxxxxxxxx> wrote:

I'm having an issue with ACLs on my CephFS test environment. Am I an idiot or is something weird going on?

TLDR;

I setfacl as root for a local user and the user still can't access the file.

Example:

root@test-client:/media/cephfs/storage/labs# touch test 

root@test-client:/media/cephfs/storage/labs# chown root:root test 

root@test-client:/media/cephfs/storage/labs# chmod 660 test

root@test-client:/media/cephfs/storage/labs# setfacl -m u:brady:rwx test

other shell as local user:

brady@test-client:/media/cephfs/storage/labs$ getfacl test 

# file: test

# owner: root

# group: root

user::rw-

user:brady:rwx

group::rw-

mask::rwx

other::---

brady@test-client:/media/cephfs/storage/labs$ cat test

cat: test: Permission denied

Configuration details:

Ubuntu 16.04.1

fuse 2.9.4-1ubuntu3.1

ceph-fuse 10.2.2-0ubuntu0.16.04.2

acl 2.2.52-3

kernel 4.4.0-34-generic (from ubuntu)

fstab entry:

mount.fuse.ceph#id=admin,conf=/etc/ceph/ceph.conf       /media/cephfs   fuse    defaults,_netdev        0       0

ceph.conf:

[global]

fsid = 6f91f60c-7bc0-4aaa-a136-4a90851fbe10

mon_initial_members = mon0

mon_host = 10.124.103.60

auth_cluster_required = cephx

auth_service_required = cephx

auth_client_required = cephx

public_network = 10.124.103.0/24

cluster_network = 10.124.104.0/24

osd_pool_default_size = 3

[client]

        fuse_default_permission=0 

        client_acl_type=posix_acl

_______________________________________________
ceph-users mailing list
ceph-users@xxxxxxxxxxxxxx
http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com