| Chapter 4. Miscellaneous | ||
|---|---|---|
 |  | |
| Chapter 4. Miscellaneous | ||
|---|---|---|
| | | |
Table of Contents
NFSv4 ACLs do not have a 1-on-1 mapping to POSIX ACLs. But there exist the NFSv4 ACL tools, for which SuSE has some online docs, and IBM as well.
Procedure 4.1. Setting ACLs through NFSv4
Before setting the ACL
apprentice@nfs-server:~$ sudo getfacl /lwphome/numath/
getfacl: Removing leading '/' from absolute path names
# file: lwphome/numath/
# owner: joeuser
# group: joeuser
user::rwx
group::r-x
other::r-x
On the client, add to the ACL
joeuser@nfs-client:~$ mount|grep nfs-server
nfs-server.mydomain.com:/lwphome on /home type nfs4 (rw,sec=krb5p,rsize=32768,wsize=32768,acl,clientaddr=192.168.0.50,addr=192.168.0.52)
joeuser@nfs-client:~$ nfs4_setfacl -a 'A::janeuser@mydomain.com:RWX' /home/numath
joeuser@nfs-client:~$
After setting the ACL
apprentice@nfs-server:~$ sudo getfacl /lwphome/numath/
getfacl: Removing leading '/' from absolute path names
# file: lwphome/numath/
# owner: joeuser
# group: joeuser
user::rwx
user:janeuser:rwx
group::r-x
mask::rwx
other::r-x
| | | |
| Security |  | Creating NFSv4 homedirs on request |