From owner-freebsd-fs@FreeBSD.ORG Mon Feb 7 23:08:28 2011 Return-Path: Delivered-To: freebsd-fs@freebsd.org Received: from mx1.freebsd.org (mx1.freebsd.org [IPv6:2001:4f8:fff6::34]) by hub.freebsd.org (Postfix) with ESMTP id 51CFE106566C for ; Mon, 7 Feb 2011 23:08:28 +0000 (UTC) (envelope-from rmacklem@uoguelph.ca) Received: from esa-jnhn.mail.uoguelph.ca (esa-jnhn.mail.uoguelph.ca [131.104.91.44]) by mx1.freebsd.org (Postfix) with ESMTP id 0F1688FC20 for ; Mon, 7 Feb 2011 23:08:27 +0000 (UTC) X-IronPort-Anti-Spam-Filtered: true X-IronPort-Anti-Spam-Result: ApwEAGgKUE2DaFvO/2dsb2JhbACEG6F+qR2QI4Engz12BIR6hm0 X-IronPort-AV: E=Sophos;i="4.60,439,1291611600"; d="scan'208";a="110036169" Received: from erie.cs.uoguelph.ca (HELO zcs3.mail.uoguelph.ca) ([131.104.91.206]) by esa-jnhn-pri.mail.uoguelph.ca with ESMTP; 07 Feb 2011 18:08:27 -0500 Received: from zcs3.mail.uoguelph.ca (localhost.localdomain [127.0.0.1]) by zcs3.mail.uoguelph.ca (Postfix) with ESMTP id 79F67B3F23; Mon, 7 Feb 2011 18:08:27 -0500 (EST) Date: Mon, 7 Feb 2011 18:08:27 -0500 (EST) From: Rick Macklem To: =?utf-8?Q?Tom=C3=A1=C5=A1_Drbohlav?= Message-ID: <1174528658.1552842.1297120107416.JavaMail.root@erie.cs.uoguelph.ca> In-Reply-To: <4D50099C.1030401@karlov.mff.cuni.cz> MIME-Version: 1.0 Content-Type: text/plain; charset=utf-8 Content-Transfer-Encoding: 7bit X-Originating-IP: [172.17.91.202] X-Mailer: Zimbra 6.0.10_GA_2692 (ZimbraWebClient - IE8 (Win)/6.0.10_GA_2692) Cc: freebsd-fs@freebsd.org Subject: Re: NFSv4 ACLs on NFS4 mount ? X-BeenThere: freebsd-fs@freebsd.org X-Mailman-Version: 2.1.5 Precedence: list List-Id: Filesystems List-Unsubscribe: , List-Archive: List-Post: List-Help: List-Subscribe: , X-List-Received-Date: Mon, 07 Feb 2011 23:08:28 -0000 > Hello, > > I have 8.1-RELEASE running ZFS and NFS4 experimantal server and I > wonder, what is the status of NFS4 ACLs? I see them work on ZFS > fileystems directly mounted but when mounted via NFS4 (even on the > same > machine), getfacl returns 'old' POSIX form instead of NFSv4 ACLs. By > digging mailng list archive I got to know that this 'should' work but > for me it doesn't. > Thanks to George spotting it recently, they should work if you apply the ACL related patches found at: http://people.freebsd.org/~rmacklem For 8.1/ZFS, you'll see that there is one for the client side (adds VOP_PATHCONF() support to the client), plus one for the server that is in head, stable/8 but not 8.1. (It replaces a VOP_ACCESS() with a VOP_ACCESSX().) Also, although I think that 8.1 has everything else you need except the two patches, I'll admit that I haven't tested anything that is pre-8.2 with these patches. (ie. You might also need an 8.2 upgrade, but hopefully not.) Good luck with them, rick