Hello, I want to give an NFSv4 client full access over an export. So it is configured as a root client without root-squash and security set to system. This works just fine as can be expected until I try to access a directory which has an ACL of type deny set. An example:

# chmod +a user AD\\some-user deny dir_gen_all guenther/testdir

Now on the client as root:

# ls -la /mnt/guenther/testdir/
ls: cannot access '/mnt/guenther/testdir/.': Permission denied
ls: cannot access '/mnt/guenther/testdir/..': Permission denied
ls: cannot access '/mnt/guenther/testdir/test.txt': Permission denied
total 0
d????????? ? ? ? ? ? .
d????????? ? ? ? ? ? ..
?????????? ? ? ? ? ? test.txt

Is this an expected behaviour? Removing the ACL allows root to access the directory again. 

kind regards

Günther