NFS permissions Question

[Juergen Waiblinger]

Hi all,
in our setup we try to use NFS with users out of the AD. Everything works but if a user creates a file it will only have the permissions inherited by the dataset. On a client chown won't work but will work on the Freenas-Server also setfacl won't work from a client side. Perhaps a quite simple question I'm sure we are misisng something either on the server or client side
We are running on FreeNAS-9.3-STABLE-201509282017.

Regards

Juergen

 

[Juergen Waiblinger]

small update
changing on the dataset mapall to root:wheel lets do a chown from the client. but what we would prefer that a file that is created will have ownership and group from the one creating the file. An yidea if this is possible, with a standard linux NFS-Server never seen this behaviour

 

[Alvin]

chown is for POSIX permissions (Unix). setfacl is for ACL's (Windows). UNIX permissions are easier to use.
Files will receive the group of the directory above, and not the default group of the user, but should have the user that created them as owner.
Doing a chown from the client will only work if your NFS maproot user is root.

What are the permissions when a client creates a file now, and what are the permissions you would like it to have?
I didn't really try AD yet, but I suppose your client will also have to be authenticated to that AD server in order to know the usernames.

 

[Juergen Waiblinger]

thanks for your remarks
clients and users will authenticate with AD using centrify on linux so any AD user can login to a linux box with his AD credentials. AD is linked to frrenas and gentent klis wbinfo working as expected. You can chosoe AD users in the permissions of a dataset etc.regarding chown and setfacl this is at least for the time being not an issue as we see the following issue with NFSv3 NFSv4a user is logged in with user abc when he tocuhes a file in the NFS-share it will have owner and group inherited from what is setup in the share settings from Freenas. expectation would be that it reflects user which has created the file.

 

[SweetAndLow]

What do your mount options look like? The owner of the file is always the person who created it. Why you're seeing it be the owner of the dataset is just a happy accident. Group can either be inherited by parent directory or be the primary group of the user depending on system configuration.