NFSv4 ACL read error

Hi,

OneFS 8.2.2

I have a strange error with accessing NFSv4 ACLs from a client. I mount the directories from our Isilon on a linux client via NFSv4 to back them up with TSM/ISP. The backup works for millions of files, but there are a few files, where the nfs_acl cannot be read. The backup client logs the following message:

I/O error reading file attribute: system.nfs4_acl for: /mnt/tsm/x/y/z/Desktop.ini. errno = 121, Remote I/O error

When I try to read the acl with nfs4_getfacl, the error "An NFS server error occurred." is shown. OneFS shows the following ACL of the file:

# ls -le Desktop.ini
-rwxrwx--- + 1 root xyz 226 Apr 11 2016 Desktop.ini
OWNER: user:root
GROUP: group:xyz
CONTROL:sacl_auto_inherited
0: Authenticated Users allow file_gen_read
1: creator_owner allow file_gen_all,object_inherit,container_inherit,inherit_only
2: group:Administrators allow file_gen_all,object_inherit,container_inherit
3: SYSTEM allow file_gen_all,object_inherit,container_inherit

Looking at the other failed files, it seems, that all of them have local Windows principals in their ACL, like SYSTEM or Administrator. Is this a known problem? What can I do backup those ACLs from a NFS client?

Regards,

Dirk

Responses(1)

D

dirkuos

1 Rookie

•

32 Posts

0

June 17th, 2021 02:00

I just found out, that maybe the empty space in a principal could be the cause. Example:

this works:

# ls -le Libreoffice.odt
-rwxrwx--- +   1 root  wheel  9061 Jul  4  2016 Libreoffice.odt
 OWNER: user:root
 GROUP: group:wheel
 CONTROL:dacl_auto_inherited
 0: group:Administrators allow file_gen_all
 1: user:dirk allow inherited file_gen_all,inherited_ace

# nfs4_getfacl Libreoffice.odt
A:g:1544:rwadxtTnNcCoy
A::100123:rwadxtTnNcCoy

Then I added the principal "Authenticated Users" using my windows explorer. And now the acl cannot be read by the nfs client.

# ls -le Libreoffice.odt
-rwxrwx--- +   1 root  wheel  9061 Jul  4  2016 Libreoffice.odt
 OWNER: user:root
 GROUP: group:wheel
 CONTROL:dacl_auto_inherited
 0: group:Administrators allow file_gen_all
 1: Authenticated Users allow file_gen_read,file_gen_write,file_gen_execute
 2: user:dirk allow inherited file_gen_all,inherited_ace

# nfs4_getfacl Libreoffice.odt
An NFS server error occurred.

View All

No Events found!