Re: [Moosefs-users] problem: cannot access group directory

[Alexander A. <akh...@ri...>]

Hi all!

I have a problem like described is this post.

My config:
mfsexports.cfg on Master:
192.168.206.0/24                /       rw,alldirs,ignoregid,maproot=0

On client:
mfsmount /moosefs_mnt -H 192.168.206.1 -o mfscachefiles,suid
mkdir /moosefs_mnt/test
chmod g+s /moosefs_mnt/test

MFS Client is not used as MFS Master or Metalogger or Chunk server.
MFS Client is also a Win 2003 domain member Samba server
and directory /moosefs_mnt/test is shared by Samba.

chown "DOMAIN\some_group" /moosefs_mnt/test
ls -ld /moosefs_mnt/test
drwxrws--- 2 root some_group 0 2010..... /moosefs_mnt/test

Some domain-user is a member of "DOMAIN\some_group".
When he creates file or folder in /moosefs_mnt/test (via Samba share)
the newly created child folder does not inherit
groupID from its parent (as expected because the setgid flag is set):

ls -ld /moosefs_mnt/test/subdir
drwxrws--- 2 DOMAIN\domain-user NEWRIDAN\Domain users 0 2010..... /moosefs_mnt/test/subdir

As you can see newly created child folder has "Domain users"
group assigned. I think it is because "Domain users" is a primary group
for domain-user.

In the same time when test-folder is shared from EXT3 file system
setgid flag works perfectly.

Any idea? Thanks!
wbr
Alexander Akhobadze

======================================================

On Wed, 22 Sep 2010 11:41:00 +0200
Michał Borychowski <mic...@ge...> wrote:

> Please check this FAQ entry:
> http://www.moosefs.org/moosefs-faq.html#supplementary_groups

Oops, I missed the FAQ ... The entry says that MFS will test privileges only of main groups because it is much safer. I love "safer" so I would use the permission 755 instead of 750  

Thanks Michał for you helps,

> -----Original Message-----
> From: Anh K. Huynh [mailto:ky...@vi...] 
> Sent: Wednesday, September 22, 2010 10:52 AM
> To: moo...@li...
> Subject: [Moosefs-users] problem: cannot access group directory
> 
> Hello,
> 
> I have a user `bbt_landing` who belongs to the group `builder`, and
> a directory name `test` which has the permission 750. The directory
> is located on a MFS volume. The problem is that user `bbt_landing`
> cannot access to the directory.
> 
> More details can be found at
>       http://metakyanh.sarovar.org/moosefs.report/report3.html
> 
> Any idea?