<html> <head> <meta content="text/html; charset=UTF-8" http-equiv="Content-Type"> </head> <body bgcolor="#FFFFFF" text="#000066"> On 07/01/2012 11:03 PM, Natxo Asenjo wrote: <blockquote cite="mid:CAHBEJzW78=BypRLgCUQt2YE+a-2OKK1EYNVx04gxA2fnHoxLqQ@mail.gmail.com" type="cite"> <meta http-equiv="Content-Type" content="text/html; charset=UTF-8"> <div class="gmail_quote">On Sun, Jul 1, 2012 at 10:39 PM, <<a moz-do-not-send="true" href="mailto:ondrejv@s3group.com" target="_blank">ondrejv@s3group.com</a>> wrote: <blockquote class="gmail_quote" style="margin:0 0 0 .8ex;border-left:1px #ccc solid;padding-left:1ex"> In fact, Netapp is (sadly to say) the only NFSv4 server in the whole world that can provide you with a true NFSv4 ACLs (remember to turn them on using options nfs.v4.acl = on). The nasty hack Rob mentioned will only provide you with POSIX Acls mapped to the NFSv4 acls - which will consequently cripple down the whole ACLs the NFS server is providing. So if you want a nice, fully fledged NFSv4 ACLs, go to Netapp or Solaris based NFSv4 server. Forget about Linux. </blockquote> </div> ok, thanks for confirming what I was already thinking. We do have Netapp (and very happy customers, I must say). When you say 'Solaris based' do you mean nexenta/openindiana? That still is a very nice choice to have, it would be great to have a linux based one, but still. -- natxo </blockquote> The real problem is that no Linux filesystem I am aware of can store NFSv4 ACLs natively - there are some patches for ext4 but I doubt they did make its way for the production. The future seems to be richacl friendly filesystem, but I do not know anything about it, too. The only filesystem that can store NFSv4 ACLs is Suns ZFS so hence you should be able to built your own NFS server based on OpenSolaris or some clones. Actually, you might want to check this: <a class="moz-txt-link-freetext" href="http://www.bestbits.at/richacl/">http://www.bestbits.at/richacl/</a> to see if your kernel has this patch - if yes, there is quite a good chance you could do it on Linux, too. Ondrej </body> </html>