[gpfsug-discuss] Samba Export Anomalies
Konstantin Arnold
konstantin.arnold at unibas.ch
Tue Jul 5 19:53:03 BST 2016
Hi Luke,
probably I don't have enough information about your AFM setup but maybe
you could check the ACLs on the export as well as ACLs on the directory
to be mounted. If you are using AFM from a home location that has ACLs
set then they will also be transferred to cache location.
(We ran into similar issues when we had to take over data from a SONAS
system that was assigning gid_numbers from an internal mapping table -
all had to be cleaned up first before clients could have access through
our CES system.)
Best
Konstantin
On 07/05/2016 04:25 PM, Luke Raimbach wrote:
> Hi All,
>
> I'm having a frustrating time exporting an Independent Writer AFM fileset through Samba.
>
> Native GPFS directories exported through Samba seem to work properly, but when creating an export which points to an AFM IW fileset, I get "Access Denied" errors when trying to create files from an SMB client and even more unusual "Failed to enumerate objects in the container: Access is denied." messages if I try to modify the Access Control Entries through a Windows client.
>
> Here is the smb.conf file:
>
> ***[BEGIN smb.conf]***
>
> [global]
> idmap config * : backend = autorid
> idmap config * : range = 100000-999999
> idmap config THECRICK : backend = ad
> idmap config THECRICK : schema_mode = rfc2307
> idmap config THECRICK : range = 30000000-31999999
> local master = no
> realm = THECRICK.ORG
> security = ADS
> aio read size = 1
> aio write size = 1
> async smb echo handler = yes
> clustering = yes
> ctdbd socket = /var/run/ctdb/ctdbd.socket
> ea support = yes
> force unknown acl user = yes
> level2 oplocks = no
> log file = /var/log/samba/log.%m
> log level = 3
> map hidden = yes
> map readonly = no
> netbios name = MS_GENERAL
> printcap name = /etc/printcap
> printing = lprng
> server string = Samba Server Version %v
> socket options = TCP_NODELAY SO_KEEPALIVE TCP_KEEPCNT=4 TCP_KEEPIDLE=240 TCP_KEEPINTVL=15
> store dos attributes = yes
> strict allocate = yes
> strict locking = no
> unix extensions = no
> vfs objects = shadow_copy2 syncops fileid streams_xattr gpfs
> gpfs:dfreequota = yes
> gpfs:hsm = yes
> gpfs:leases = yes
> gpfs:prealloc = yes
> gpfs:sharemodes = yes
> gpfs:winattr = yes
> nfs4:acedup = merge
> nfs4:chown = yes
> nfs4:mode = simple
> notify:inotify = yes
> shadow:fixinodes = yes
> shadow:format = @GMT-%Y.%m.%d-%H.%M.%S
> shadow:snapdir = .snapshots
> shadow:snapdirseverywhere = yes
> shadow:sort = desc
> smbd:backgroundqueue = false
> smbd:search ask sharemode = false
> syncops:onmeta = no
> workgroup = THECRICK
> winbind enum groups = yes
> winbind enum users = yes
>
> [production_rw]
> comment = Production writable
> path = /general/production
> read only = no
>
> [stp-test]
> comment = STP Test Export
> path = /general/export/stp/stp-test
> read-only = no
>
> ***[END smb.conf]***
>
>
> The [production_rw] export is a test directory on the /general filesystem which works from an SMB client. The [stp-test] export is an AFM fileset on the /general filesystem which is a cache of a directory in another GPFS filesystem:
>
>
> ***[BEGIN mmlsfileset general crick.general.export.stp.stp-test --afm -L]***
>
> Attributes for fileset crick.general.export.stp.stp-test:
> ==========================================================
> Status Linked
> Path /general/export/stp/stp-test
> Id 1
> Root inode 1048579
> Parent Id 0
> Created Fri Jul 1 15:56:48 2016
> Comment
> Inode space 1
> Maximum number of inodes 200000
> Allocated inodes 100000
> Permission change flag chmodAndSetacl
> afm-associated Yes
> Target gpfs:///camp/stp/stp-test
> Mode independent-writer
> File Lookup Refresh Interval 30 (default)
> File Open Refresh Interval 30 (default)
> Dir Lookup Refresh Interval 60 (default)
> Dir Open Refresh Interval 60 (default)
> Async Delay 15 (default)
> Last pSnapId 0
> Display Home Snapshots no
> Number of Gateway Flush Threads 4
> Prefetch Threshold 0 (default)
> Eviction Enabled yes (default)
>
> ***[END mmlsfileset general crick.general.export.stp.stp-test --afm -L]***
>
>
> Anyone spot any glaringly obvious misconfigurations?
>
> Cheers,
> Luke.
>
> Luke Raimbach
> Senior HPC Data and Storage Systems Engineer,
> The Francis Crick Institute,
> Gibbs Building,
> 215 Euston Road,
> London NW1 2BE.
>
> E: luke.raimbach at crick.ac.uk
> W: www.crick.ac.uk
>
> The Francis Crick Institute Limited is a registered charity in England and Wales no. 1140062 and a company registered in England and Wales no. 06885462, with its registered office at 215 Euston Road, London NW1 2BE.
> _______________________________________________
> gpfsug-discuss mailing list
> gpfsug-discuss at spectrumscale.org
> http://gpfsug.org/mailman/listinfo/gpfsug-discuss
>
More information about the gpfsug-discuss
mailing list