Re: How to enable ACL support in Glusterfs volume

Jiffin Tony Thottan <jthottan@xxxxxxxxxx> · Tue, 26 Apr 2016 15:55:27 +0530



    On 26/04/16 15:28, ABHISHEK PALIWAL
      wrote:

    
            Hi Jiffin,

              
            Any clue you have on this I am seeing some logs related to
            ACL in command and some .so file in glusterfs/tmp-a2.log
            file but no failure is there.

            
    Hi Abhishek,

    
    Can u attach the logs files (/var/log/glusterfs/tmp-a2.log)?

    Also u can try out ganesha which can export gluster volumes as well
    as other exports using single server.

    Right now ganesha only supports nfsv4 acl (not the posix acl). And
    also ganesha well supported with gluster volume

    when we compare with knfs.

    
    --

    Jiffin 

    
        Regards,

        
        Abhishek

        
                  On Tue, Apr 26, 2016 at 1:17
                    PM, ABHISHEK PALIWAL <abhishpaliwal@xxxxxxxxx>
                    wrote:

                    
                          On
                              Tue, Apr 26, 2016 at 12:54 PM, Jiffin Tony
                              Thottan <jthottan@xxxxxxxxxx>
                              wrote:

                              
                                    On 26/04/16 12:22, ABHISHEK
                                      PALIWAL wrote:

                                    
                                          On
                                            Tue, Apr 26, 2016 at 12:18
                                            PM, Jiffin Tony Thottan <jthottan@xxxxxxxxxx>
                                            wrote:

                                            
                                               On
                                                  26/04/16 12:11,
                                                  ABHISHEK PALIWAL
                                                  wrote:

                                                  
                                                          Hi,
                                                           
                                                          I want to enable ACL support
                                                          on gluster
                                                          volume using
                                                          the kernel NFS
                                                          ACL support so
                                                          I have
                                                          followed below
                                                          steps after
                                                          creation of
                                                          gluster
                                                          volume:

                                                          
                                                Is
                                                  there any specific
                                                  reason to knfs instead
                                                  of in build gluster
                                                  nfs server ?

                                                
                                            Yes, because we have
                                              other NFS mounted volume
                                              as well in system.
                                          
                                        
                                   Did u mean to say that knfs is
                                  running on each gluster nodes (i mean
                                  bricks) ?

                                  
                            Yes. 

                            
                                                          1. mount
                                                          -t glusterfs
                                                          -o acl
10.32.0.48:/c_glusterfs /tmp/a2
                                                           
                                                          2.      
                                                          update
                                                          the
                                                          /etc/exports
                                                          file
                                                          /tmp/a2 10.32.*(rw,acl,sync,no_subtree_check,no_root_squash,fsid=14)
                                                           
                                                          3.      
                                                          exportfs
                                                          –ra
                                                           
                                                          4.      
                                                          gluster
                                                          volume set
                                                          c_glusterfs
                                                          nfs.acl off
                                                           
                                                          5.      
                                                          gluster
                                                          volume set
                                                          c_glusterfs
                                                          nfs.disable on
                                                           
                                                          we have disabled above two
                                                          options
                                                          because we are
                                                          using Kernel
                                                          NFS ACL
                                                          support and
                                                          that is
                                                          already
                                                          enabled.
                                                           
                                                           
                                                          on other board mounting it
                                                          using 
                                                           
                                                          mount -t nfs -o acl,vers=3
                                                          10.32.0.48:/tmp/a2
                                                          /tmp/e/
                                                           
                                                          setfacl -m u:application:rw
                                                          /tmp/e/usr
                                                          setfacl: /tmp/e/usr: Operation
                                                          not supported
                                                           
                                                          
                                                Can
                                                  you please check the
                                                  clients for the hints
                                                  ?

                                                
                                            What I need to check
                                              here? 

                                            
                                   can u check
                                  /var/log/glusterfs/tmp-a2.log?

                                  
                            There is no failure in server sidein
                              /var/log/glusterfs/tmp-a2.log file but on
                              the board where I am getting this failure
                              don't running gluster here so not possible
                              to check /var/log/glusterfs/tmp-a2.log
                              file. 

                            
                                                          and application is the system
                                                          user like
                                                          below
                                                           
                                                          application:x:102:0::/home/application:/bin/sh

                                                          
                                                          I don't why I am getting this
                                                          failure when I
                                                          enabled all
                                                          the acl
                                                          support in
                                                          each steps.

                                                          
                                                          Please let me know how can I
                                                          enable this.

                                                          
                                                          Regards,

                                                          
                                                          Abhishek

                                                          
                                                 --

                                                Jiffin

                                                
                                                  _______________________________________________
Gluster-devel mailing list
Gluster-devel@xxxxxxxxxxx
http://www.gluster.org/mailman/listinfo/gluster-devel
                                                
                                                
                                          -- 

                                          
                                              Regards

                                              Abhishek Paliwal

                                            
                              -- 

                              
                                  Regards

                                  Abhishek Paliwal

                                
                  -- 

                  
                      Regards

                      Abhishek Paliwal

                    
_______________________________________________
Gluster-devel mailing list
Gluster-devel@xxxxxxxxxxx
http://www.gluster.org/mailman/listinfo/gluster-devel