NFSv4 ACL 访问权限被拒绝
适用于
- ONTAP
- NFSv4 ACL
- NFSv4
问题
- NFS 用户在通过 NFSv4 访问目录时收到
Permission denied
user1@host1:/vol1$ cd dir1/ bash: cd: dir1/: Permission denied- 该目录配置了 显式 NFSv4 组 ACE
root@host1:/home/localroot# nfs4_getfacl /vol1/dir1/# file: /vol1/dir1/A:g:g1@ntap.local:rwaDxtTnNcCyA::OWNER@:rwaDxtTnNcCyA:g:GROUP@:rxtncyD::EVERYONE@:rxtncy- ONTAP
getxxbyyy显示 UNIX 用户是配置的 ACE 组的成员
::*> vserver services name-service getxxbyyy getgrlist -node node1 -vserver svm1 -username user1 -use-cache false -show-source trueSource used for lookup: Unknownpw_name: user1Groups: 8668 8668 8671 8682- NFS 客户端
id命令可显示缺少 ACE 组的 UNIX 用户
user1@host1:/dir1$ iduid=5600(user1) gid=8668(gs1) groups=8668(gs1),8671(g2)- ONTAP
show-effective-permissions显示 UNIX 用户对该目录具有足够的权限
::*> vserver security file-directory show-effective-permissions -vserver svm1 -unix-user-name user1 -path /vol1/dir1 -instance Vserver: svm1 Windows User Name: ntap\user1 Unix User Name: user1 File Path: /vol1/dir1/ CIFS Share Path: - Effective Permissions: Effective File or Directory Permission: 0x1601ff Read Write Append Read EA Write EA Execute Delete Child Read Attributes Write Attributes Read Control Write DAC Synchronize