apparently fuse_default_permission and client_acl_type have to be in the fstab entry instead of the ceph.conf.
Sorry for polluting the mailing list with an amateur mis-configuration. On Thu, Aug 18, 2016 at 4:26 PM, Brady Deetz <bde...@gmail.com> wrote: > I'm having an issue with ACLs on my CephFS test environment. Am I an idiot > or is something weird going on? > > TLDR; > I setfacl as root for a local user and the user still can't access the > file. > > Example: > root@test-client:/media/cephfs/storage/labs# touch test > root@test-client:/media/cephfs/storage/labs# chown root:root test > root@test-client:/media/cephfs/storage/labs# chmod 660 test > root@test-client:/media/cephfs/storage/labs# setfacl -m u:brady:rwx test > > other shell as local user: > brady@test-client:/media/cephfs/storage/labs$ getfacl test > # file: test > # owner: root > # group: root > user::rw- > user:brady:rwx > group::rw- > mask::rwx > other::--- > > brady@test-client:/media/cephfs/storage/labs$ cat test > cat: test: Permission denied > > > > Configuration details: > Ubuntu 16.04.1 > fuse 2.9.4-1ubuntu3.1 > ceph-fuse 10.2.2-0ubuntu0.16.04.2 > acl 2.2.52-3 > kernel 4.4.0-34-generic (from ubuntu) > > fstab entry: > mount.fuse.ceph#id=admin,conf=/etc/ceph/ceph.conf /media/cephfs > fuse defaults,_netdev 0 0 > > ceph.conf: > [global] > fsid = 6f91f60c-7bc0-4aaa-a136-4a90851fbe10 > mon_initial_members = mon0 > mon_host = 10.124.103.60 > auth_cluster_required = cephx > auth_service_required = cephx > auth_client_required = cephx > public_network = 10.124.103.0/24 > cluster_network = 10.124.104.0/24 > osd_pool_default_size = 3 > > [client] > fuse_default_permission=0 > client_acl_type=posix_acl > >
_______________________________________________ ceph-users mailing list ceph-users@lists.ceph.com http://lists.ceph.com/listinfo.cgi/ceph-users-ceph.com
