<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
<meta content="text/html; charset=utf-8">
</head>
<body>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; font-size:11pt; color:black">
Fred,<br>
<br>
</div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; font-size:11pt; color:black">
I thought like you that an ACL change caused a backup with mmbackup. Maybe only if you change the NFSv4 ACL. I'm sure it's documented somewhere and there is a flag to Protect to stop this from happening.<br>
<br>
</div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; font-size:11pt; color:black">
Maybe a POSIX permission (setfacl style) doesn't trigger a backup. This would tie in with Paul's suggestion that changing via SMB caused the backup to occur.<br>
<br>
</div>
<div dir="auto" style="direction:ltr; margin:0; padding:0; font-family:sans-serif; font-size:11pt; color:black">
Simon</div>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> gpfsug-discuss-bounces@spectrumscale.org <gpfsug-discuss-bounces@spectrumscale.org> on behalf of stockf@us.ibm.com <stockf@us.ibm.com><br>
<b>Sent:</b> Tuesday, October 15, 2019 5:49:34 PM<br>
<b>To:</b> gpfsug-discuss@spectrumscale.org <gpfsug-discuss@spectrumscale.org><br>
<b>Cc:</b> gpfsug-discuss@spectrumscale.org <gpfsug-discuss@spectrumscale.org><br>
<b>Subject:</b> Re: [gpfsug-discuss] default owner and group for POSIX ACLs</font>
<div> </div>
</div>
<div>
<div class="socmaildefaultfont" dir="ltr" style="font-family:Arial,Helvetica,sans-serif; font-size:12pt">
<div dir="ltr">Thanks Paul. Could you please clarify which ACL you changed, the GPFS NFSv4 ACL or the POSIX ACL?</div>
<div dir="ltr">
<div class="socmaildefaultfont" dir="ltr" style="font-family:Arial,Helvetica,sans-serif; font-size:10.5pt">
<div dir="ltr"><br>
<font size="2" face="Default Sans Serif,Verdana,Arial,Helvetica,sans-serif"><span style="font-size:1.143em">Fred<br>
__________________________________________________<br>
Fred Stock | IBM Pittsburgh Lab | 720-430-8821<br>
stockf@us.ibm.com</span></font></div>
</div>
</div>
<div dir="ltr"> </div>
<div dir="ltr"> </div>
<blockquote dir="ltr" style="border-left:solid #aaaaaa 2px; margin-left:5px; padding-left:5px; direction:ltr; margin-right:0px">
----- Original message -----<br>
From: Paul Ward <p.ward@nhm.ac.uk><br>
Sent by: gpfsug-discuss-bounces@spectrumscale.org<br>
To: gpfsug main discussion list <gpfsug-discuss@spectrumscale.org><br>
Cc:<br>
Subject: [EXTERNAL] Re: [gpfsug-discuss] default owner and group for POSIX ACLs<br>
Date: Tue, Oct 15, 2019 12:18 PM<br>
<br>
<div>
<p style="margin:0px"><span style="">Hi Fred,</span></p>
<p style="margin:0px"><span style=""> </span></p>
<p style="margin:0px"><span style="">From the tests I have done changing the ACL results in just an \u2018update\u2019 to when using Spectrum Protect, even on migrated files.</span></p>
<p style="margin:0px"><span style=""> </span></p>
<div>
<p style="margin:0px">Kindest regards,</p>
<p style="margin:0px">Paul</p>
<p style="margin:0px"> </p>
<p style="margin:0px">Paul Ward</p>
<p style="margin:0px">TS Infrastructure Architect</p>
<p style="margin:0px">Natural History Museum</p>
<p style="margin:0px">T: 02079426450</p>
<p style="margin:0px">E: p.ward@nhm.ac.uk</p>
</div>
<p style="margin:0px"><span style=""> </span></p>
<div>
<div style="border:none; border-top:solid #E1E1E1 1.0pt; padding:3.0pt 0cm 0cm 0cm">
<p style="margin:0px"><b><span lang="EN-US">From:</span></b><span lang="EN-US"> gpfsug-discuss-bounces@spectrumscale.org <gpfsug-discuss-bounces@spectrumscale.org>
<b>On Behalf Of </b>Frederick Stock<br>
<b>Sent:</b> 15 October 2019 17:09<br>
<b>To:</b> gpfsug-discuss@spectrumscale.org<br>
<b>Cc:</b> gpfsug-discuss@spectrumscale.org<br>
<b>Subject:</b> Re: [gpfsug-discuss] default owner and group for POSIX ACLs</span></p>
</div>
</div>
<p style="margin:0px"> </p>
<div>
<div>
<p style="margin:0px"><span style="font-size:12.0pt; font-family:"Arial",sans-serif">As I understand if you change only the POSIX attributes on a file then you are correct that TSM will only backup the file metadata, actually just the POSIX relevant metadata.
However, if you change ACLs or other GPFS specific metadata then TSM will backup the entire file, TSM does not keep all file metadata separate from the actual file data.</span></p>
</div>
<div>
<div>
<div>
<p style="margin:0px"><br>
<span style="font-size:11.5pt; font-family:"Verdana",sans-serif">Fred<br>
__________________________________________________<br>
Fred Stock | IBM Pittsburgh Lab | 720-430-8821<br>
<a href="mailto:stockf@us.ibm.com" target="_blank">stockf@us.ibm.com</a></span><span style="font-size:10.5pt; font-family:"Arial",sans-serif"></span></p>
</div>
</div>
</div>
<div>
<p style="margin:0px"><span style="font-size:12.0pt; font-family:"Arial",sans-serif"> </span></p>
</div>
<div>
<p style="margin:0px"><span style="font-size:12.0pt; font-family:"Arial",sans-serif"> </span></p>
</div>
<blockquote style="border:none; border-left:solid #AAAAAA 1.5pt; padding:0cm 0cm 0cm 4.0pt; margin-left:3.75pt; margin-top:5.0pt; margin-right:0cm; margin-bottom:5.0pt">
<p style="margin:0px"><span style="font-size:12.0pt; font-family:"Arial",sans-serif">----- Original message -----<br>
From: Simon Thompson <<a href="mailto:S.J.Thompson@bham.ac.uk" target="_blank">S.J.Thompson@bham.ac.uk</a>><br>
Sent by: <a href="mailto:gpfsug-discuss-bounces@spectrumscale.org" target="_blank">
gpfsug-discuss-bounces@spectrumscale.org</a><br>
To: gpfsug main discussion list <<a href="mailto:gpfsug-discuss@spectrumscale.org" target="_blank">gpfsug-discuss@spectrumscale.org</a>><br>
Cc:<br>
Subject: [EXTERNAL] Re: [gpfsug-discuss] default owner and group for POSIX ACLs<br>
Date: Tue, Oct 15, 2019 11:41 AM<br>
</span></p>
<div>
<p style="margin:0px"><span style="font-size:10.0pt; font-family:"Courier New"">I thought Spectrum Protect didn't actually backup again on a file owner change. Sure mmbackup considers it, but I think Protect just updates the metadata. There are also some other
options for dsmc that can stop other similar issues if you change ctime maybe.<br>
<br>
(Other backup tools are available)<br>
<br>
Simon</span><br>
<br>
<span style="font-size:10.0pt; font-family:"Tahoma",sans-serif">\ufeff</span><span style="font-size:10.0pt; font-family:"Courier New"">On 15/10/2019, 15:31, "<a href="mailto:gpfsug-discuss-bounces@spectrumscale.org%20on%20behalf%20of%20Jonathan%20Buzzard" target="_blank">gpfsug-discuss-bounces@spectrumscale.org
on behalf of Jonathan Buzzard</a>" <<a href="mailto:gpfsug-discuss-bounces@spectrumscale.org%20on%20behalf%20of%20jonathan.buzzard@strath.ac.uk" target="_blank">gpfsug-discuss-bounces@spectrumscale.org on behalf of jonathan.buzzard@strath.ac.uk</a>> wrote:<br>
<br>
On Tue, 2019-10-15 at 12:34 +0000, Paul Ward wrote:<br>
> We are in the process of changing the way GPFS assigns UID/GIDs from<br>
> internal tdb to using AD RIDs with an offset that matches our linux<br>
> systems. We, therefore, need to change the ACLs for all the files in<br>
> GPFS (up to 80 million).<br>
<br>
You do realize that will mean backing everything up again....<br>
<br>
> We are running in mixed ACL mode, with some POSIX and some NFSv4 ACLs<br>
> being applied. (This system was set up 14 years ago and has changed<br>
> roles over time) We are running on linux, so need to have POSIX<br>
> permissions enabled.<br>
<br>
We run on Linux and only have NFSv4 ACL's applied. I am not sure why<br>
you need POSIX ACL's if you are running Linux. Very very few<br>
applications will actually check ACL's or even for that matter<br>
permissions. They just do an fopen call or similar and the OS either<br>
goes yeah or neah, and the app needs to do something in the case of<br>
neah.<br>
<br>
> <br>
> What I want to know for those in a similar environment, what do you<br>
> have as the POSIX owner and group, when NFSv4 ACLs are in use?<br>
> root:root<br>
> <br>
> or do you have all files owned by a filesystem administrator account<br>
> and group:<br>
> <ad service account>:<ad fileserver admin group><br>
> <br>
> on our samba shares we have :<br>
> admin users = @<ad fileserver admin group> <br>
> So don\u2019t actually need the group defined in POSIX.<br>
><br>
<br>
Samba works much better with NFSv4 ACL's.<br>
<br>
JAB.<br>
<br>
--<br>
Jonathan A. Buzzard Tel: +44141-5483420<br>
HPC System Administrator, ARCHIE-WeSt.<br>
University of Strathclyde, John Anderson Building, Glasgow. G4 0NG<br>
<br>
<br>
<br>
_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at spectrumscale.org<br>
<a href="outlook.com" target="_blank">gpfsug.org</a> <br>
<br>
<br>
_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at spectrumscale.org<br>
<a href="outlook.com" target="_blank">gpfsug.org</a> </span><br>
<span style="font-size:12.0pt; font-family:"Arial",sans-serif"> </span></p>
</div>
</blockquote>
<div>
<p style="margin:0px"><span style="font-size:12.0pt; font-family:"Arial",sans-serif"> </span></p>
</div>
</div>
<p style="margin:0px"> </p>
</div>
<div><font size="2" face="Default Monospace,Courier New,Courier,monospace">_______________________________________________<br>
gpfsug-discuss mailing list<br>
gpfsug-discuss at spectrumscale.org<br>
<a href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss" target="_blank">http://gpfsug.org/mailman/listinfo/gpfsug-discuss</a> </font></div>
</blockquote>
<div dir="ltr"> </div>
</div>
<br>
</div>
</body>
</html>