Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-17 Thread Bill Sommerfeld
On Fri, 2008-03-14 at 18:11 -0600, Mark Shellenbaum wrote: I think it is a misnomer to call the current implementation of ZFS a pure ACL system, as clearly the ACLs are heavily contaminated by legacy mode bits. Feel free to open an RFE. It may be a tough sell with PSARC, but maybe if

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-17 Thread Paul B. Henson
On Mon, 17 Mar 2008, Bill Sommerfeld wrote: I suspect at least some of the membership would be interested in this sort of extension and it shouldn't be that hard to sell if it's not the default behavior and it's clearly documented that turning it on (probably on a fs-by-fs basis like every

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-17 Thread Mark Shellenbaum
Paul B. Henson wrote: On Mon, 17 Mar 2008, Bill Sommerfeld wrote: I suspect at least some of the membership would be interested in this sort of extension and it shouldn't be that hard to sell if it's not the default behavior and it's clearly documented that turning it on (probably on a

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-17 Thread Paul B. Henson
On Mon, 17 Mar 2008, Mark Shellenbaum wrote: I will go ahead and do a fastrack to get the behavior that many people want. Basically, if inheritable ACEs are present for owner@, group@, everyone@ then the inherited ACE permissions will override the requested mode of the application. If no

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-17 Thread Mark Shellenbaum
Paul B. Henson wrote: On Mon, 17 Mar 2008, Mark Shellenbaum wrote: I will go ahead and do a fastrack to get the behavior that many people want. Basically, if inheritable ACEs are present for owner@, group@, everyone@ then the inherited ACE permissions will override the requested mode of

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-14 Thread Jens Elkner
On Thu, Mar 13, 2008 at 11:33:57AM +, Darren J Moffat wrote: Paul B. Henson wrote: I'm currently prototyping a Solaris file server that will dish out user home directories and group project directories via NFSv4 and Samba. Why not the in kernel CIFS server ? E.g., how would one mimic:

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-14 Thread Mark Shellenbaum
Jens Elkner wrote: On Thu, Mar 13, 2008 at 11:33:57AM +, Darren J Moffat wrote: Paul B. Henson wrote: I'm currently prototyping a Solaris file server that will dish out user home directories and group project directories via NFSv4 and Samba. Why not the in kernel CIFS server ? E.g.,

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-14 Thread Paul B. Henson
On Fri, 14 Mar 2008, Jens Elkner wrote: We already lost this functionality with the introduction of the NFSv4 ACL crap on ZFS and earned a lot of hate you feedbacks. I was actually looking forward to ZFS ACLs, as they should have been much more compatible with Samba/Windows clients.

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-14 Thread Mark Shellenbaum
Paul B. Henson wrote: On Fri, 14 Mar 2008, Mark Shellenbaum wrote: this behavior is only possible from a Windows client. When creating files from unix the POSIX rules apply and the requestors mode must be honored, which results in the owner@, group@, and everyone@ entries always being set

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-14 Thread Paul B. Henson
On Fri, 14 Mar 2008, Mark Shellenbaum wrote: That is not correct. The deny entries are necessary for POSIX semantics. In POSIX are only allowed to pick up permissions from the owner, group or other class. You can't pick up part of the permissions you are looking for from the group class and

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-14 Thread Mark Shellenbaum
Paul B. Henson wrote: On Fri, 14 Mar 2008, Mark Shellenbaum wrote: That is not correct. The deny entries are necessary for POSIX semantics. In POSIX are only allowed to pick up permissions from the owner, group or other class. You can't pick up part of the permissions you are looking for

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-13 Thread Darren J Moffat
Paul B. Henson wrote: I'm currently prototyping a Solaris file server that will dish out user home directories and group project directories via NFSv4 and Samba. Why not the in kernel CIFS server ? -- Darren J Moffat ___ zfs-discuss mailing list

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-13 Thread Rocky
On Wed, 12 Mar 2008, Roy Butler wrote: a NetApp could do some kind of mapping to satisfy your idea, but of even that I'd be skeptical. We eval'd a netapp box. ACL mapping on netapp sucks. You really need to either use unix or windows privs, not both. I run a few NetApp boxes, must

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-13 Thread David Magda
On Mar 13, 2008, at 07:33, Darren J Moffat wrote: Paul B. Henson wrote: I'm currently prototyping a Solaris file server that will dish out user home directories and group project directories via NFSv4 and Samba. Why not the in kernel CIFS server ? It's an option, but not everyone wants

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-13 Thread James C. McPherson
David Magda wrote: On Mar 13, 2008, at 07:33, Darren J Moffat wrote: Paul B. Henson wrote: I'm currently prototyping a Solaris file server that will dish out user home directories and group project directories via NFSv4 and Samba. Why not the in kernel CIFS server ? It's an option,

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-13 Thread Paul B. Henson
On Thu, 13 Mar 2008, Darren J Moffat wrote: Paul B. Henson wrote: I'm currently prototyping a Solaris file server that will dish out user home directories and group project directories via NFSv4 and Samba. Why not the in kernel CIFS server ? An official supported version of Solaris is a

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-13 Thread Richard Elling
Paul B. Henson wrote: On Thu, 13 Mar 2008, Darren J Moffat wrote: Paul B. Henson wrote: I'm currently prototyping a Solaris file server that will dish out user home directories and group project directories via NFSv4 and Samba. Why not the in kernel CIFS server ? An

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-13 Thread Paul B. Henson
On Thu, 13 Mar 2008, Rocky wrote: I run a few NetApp boxes, must admit I've never noticed the ACL mapping sucking before. How does yours suck? It's been almost a year since we evaluated Netapp, I'm a little hazy on the details. Basically, NetApp has three different ideas of the permissions

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-13 Thread Paul B. Henson
On Thu, 13 Mar 2008, Richard Elling wrote: You can get support for SXDE. Perhaps you already have it. http://www.sun.com/service/subscriptions/sxde.xml We have a ton of hardware under Silver/Gold support, quite likely we might already qualify for this, although I was previously unaware of its

[zfs-discuss] ZFS ACLs/Samba integration

2008-03-12 Thread Paul B. Henson
I'm currently prototyping a Solaris file server that will dish out user home directories and group project directories via NFSv4 and Samba. I have samba configured and integrated into our local active directory, with ACL mapping working. I'm a little confused as to the behavior of the ZFS ACL

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-12 Thread Roy Butler
Paul B. Henson wrote: I'm currently prototyping a Solaris file server that will dish out user home directories and group project directories via NFSv4 and Samba. I have samba configured and integrated into our local active directory, with ACL mapping working. I'm a little confused as to the

Re: [zfs-discuss] ZFS ACLs/Samba integration

2008-03-12 Thread Paul B. Henson
On Wed, 12 Mar 2008, Roy Butler wrote: CIFS ACLs and NFS ACLs are not on a convergence course, are they? Maybe NFSv4 ACLs (the ZFS native ACL) are based on CIFS/NT ACLs and virtually identical. The Sun version of Samba does just about a perfect mapping between them. a NetApp could do some