Ondrej Valousek <[email protected]> writes:

> Hi Mark,
> We are using Netapp as a NFS server and RHEL-6 which defaults to
> NFSv4.

I know nothing about Netapp, but why can't you use a v3 mount?  That
doesn't mean it will be any more useful, unless the server supports a
similar option, of course.  If one extra group takes you over the limit,
the setup sounds fragile anyway.

Otherwise, I don't know whether you could work around it by hacking at
idmapd or by using NFS Ganesha as a proxy.

> NFSv4 is not using mountd protocol so "--manage-gids" would not
> probably work even with Linux based NFS server.
> That leaves us only with NFS&Kerberos - which is, as I said, pretty
> much no option with SGE (unfortunately as it would be the cleanest
> solution).

GSSAPI is the only decently secure option for NFS as far as I know, but
it certainly isn't a clean solution in this case.  There's a fundamental
tension between the Kerberos model and batch processing which would be
much reduced in a capability system.  I did some work to revamp the SGE
support, but I'm not sure it's worth it, especially without more work in
other areas.  Have you tried AUKS <http://arc.liv.ac.uk/SGE/tools>?
_______________________________________________
SGE-discuss mailing list
[email protected]
https://arc.liv.ac.uk/mailman/listinfo/sge-discuss

Reply via email to