Re: [trustees] Trustees on NFS

[Andrew R. <ae...@ks...>]

Rob See wrote:
>    What would the effect of running trustees on an NFS server be ? Would 
> users on the nfs client end up with the additional permissions granted 
> by trustees. If the NFS server and client had support for acls, would 
> the client have access based on the acls even though trustees is running 
> on the server ?

I am entirely unsure how trustees would interact with a NFS server as I 
don't understand the inner workings of nfsd; however, I am fairly 
certain it would work since surely the nfs server checks permissions 
using normal syscalls.

One caveat to using trustees is that it only supports UNIX style 
permissions.  The second you load the trustees module, your ACLs will no 
longer have any effect.  And since I'm pretty sure all permission 
checking is done on the server, you would not be able to use ACLs on the 
nfs share.

Of course, once again, I'm bitten by my lack of experience with NFS. 
Does nfsd utilize regular POSIX ACLs (i.e. getfacl/setfacl) or does it 
use some sort of file-based access scheme similar to trustees?

I have been meaning to set up a NFS server on my test box and play 
around with it; maybe I can get to this on the weekend.  If you do 
decide to go ahead and mess with it, please report your findings.  I'm a 
bit interested how it does interact with a shared file system...

Thanks,
Andy

-- 
Andrew Ruder <ae...@ks...>
http://www.aeruder.net