ACL support for SCALE NFS server coming soon :)

[anodos]

POSIX1E acltype should be working in nightlies now, and I made a PR for our linux kernel NFS server to add support for NFSv4 ACL type. The latter will bring SCALE into feature parity with CORE / Enterprise regarding permissions over NFS. Hopefully in the coming weeks (probably for BlueFin) I'll add support for NFS41 ACLs (like some of the large NAS vendors).

The advantage of native NFSv4 ACLs is that we can basically store an entire Windows security descriptor in it (with POSIX1E ACLs, support can be sketchy), which means basically full compatibility with ACLS via SMB and NFS.

Code:

root@scalebuilder:/home/awalker# nfs4_getfacl /mnt/posix/
A::OWNER@:rwaDxtTcCy
A::GROUP@:rwaDxtcy
A::EVERYONE@:rwaDxtcy
root@scalebuilder:/home/awalker# nfs4_getfacl /mnt/nfsv4/
A:fd:OWNER@:rwaDdxtTnNcCoy
A:fdg:GROUP@:rwaDdxtTnNcy
A:fdg:545:rwaDdxtTnNcCoy
A:fdg:545:rwaDdxtTnNcCoy
root@scalebuilder:/home/awalker# 

 

[anodos]

Okay. I merged kernel / ZFS changes to add support to nightlies. This feature will also be available in 22.02 release. You should make sure that you're using latest nfs4-acl-tools (0.3.7 IIRC). Some earlier versions had broken support for ACE4_INHERITED_ACE flag.