Hide Forgot
Description of problem: nfs4_setfacl -a A::user110:R /test2/file Failed getxattr operation: Invalid argument Failed to instantiate ACL. Version-Release number of selected component (if applicable): NIS server is Red Hat Enterprise Linux Server release 6u8 NIS client is Red Hat Enterprise Linux Server release 6u2 Netapp-fas2554 storage nfs4-acl-tools-0.3.3-5.el6.x86_64 How reproducible: lab environment & script as below. ~~~ NIS server: [root@centos58-s ~]# uname -a Linux centos58-s.hslab.wwtech 2.6.18-308.el5 #1 SMP Tue Feb 21 20:06:06 EST 2012 x86_64 x86_64 x86_64 GNU/Linux [root@centos58-s ~]# nisdomainname hslab.wwtech [root@centos58-s ~]# cat /etc/ypserv.conf # # ypserv.conf In this file you can set certain options for the NIS server, # and you can deny or restrict access to certain maps based # on the originating host. # # See ypserv.conf(5) for a description of the syntax. # # Some options for ypserv. This things are all not needed, if # you have a Linux net. # Should we do DNS lookups for hosts not found in the hosts table ? # This option is ignored in the moment. dns: no # How many map file handles should be cached ? files: 30 # Should we register ypserv with SLP ? slp: no # After how many seconds we should re-register ypserv with SLP ? slp_timeout: 3600 # xfr requests are only allowed from ports < 1024 xfr_check_port: yes # The following, when uncommented, will give you shadow like passwords. # Note that it will not work if you have slave NIS servers in your # network that do not run the same server as you. # Host : Domain : Map : Security # # * : * : passwd.byname : port # * : * : passwd.byuid : port # Not everybody should see the shadow passwords, not secure, since # under MSDOG everbody is root and can access ports < 1024 !!! #* : * : shadow.byname : port #* : * : passwd.adjunct.byname : port * : * : shadow.byname : port * : * : passwd.adjunct.byname : port # If you comment out the next rule, ypserv and rpc.ypxfrd will # look for YP_SECURE and YP_AUTHDES in the maps. This will make # the security check a little bit slower, but you only have to # change the keys on the master server, not the configuration files # on each NIS server. # If you have maps with YP_SECURE or YP_AUTHDES, you should create # a rule for them above, that's much faster. * : * : * : none [root@centos58-s ~]# cat /etc/passwd root:x:0:0:root:/root:/bin/bash bin:x:1:1:bin:/bin:/sbin/nologin daemon:x:2:2:daemon:/sbin:/sbin/nologin adm:x:3:4:adm:/var/adm:/sbin/nologin lp:x:4:7:lp:/var/spool/lpd:/sbin/nologin sync:x:5:0:sync:/sbin:/bin/sync shutdown:x:6:0:shutdown:/sbin:/sbin/shutdown halt:x:7:0:halt:/sbin:/sbin/halt mail:x:8:12:mail:/var/spool/mail:/sbin/nologin news:x:9:13:news:/etc/news: uucp:x:10:14:uucp:/var/spool/uucp:/sbin/nologin operator:x:11:0:operator:/root:/sbin/nologin games:x:12:100:games:/usr/games:/sbin/nologin gopher:x:13:30:gopher:/var/gopher:/sbin/nologin ftp:x:14:50:FTP User:/var/ftp:/sbin/nologin nobody:x:99:99:Nobody:/:/sbin/nologin nscd:x:28:28:NSCD Daemon:/:/sbin/nologin vcsa:x:69:69:virtual console memory owner:/dev:/sbin/nologin ais:x:39:39:openais Standards Based Cluster Framework:/:/sbin/nologin ldap:x:55:55:LDAP User:/var/lib/ldap:/bin/false distcache:x:94:94:Distcache:/:/sbin/nologin ntp:x:38:38::/etc/ntp:/sbin/nologin cyrus:x:76:12:Cyrus IMAP Server:/var/lib/imap:/bin/bash mysql:x:27:27:MySQL Server:/var/lib/mysql:/bin/bash pcap:x:77:77::/var/arpwatch:/sbin/nologin uuidd:x:100:102:UUID generator helper daemon:/var/lib/libuuid:/sbin/nologin dbus:x:81:81:System message bus:/:/sbin/nologin apache:x:48:48:Apache:/var/www:/sbin/nologin avahi:x:70:70:Avahi daemon:/:/sbin/nologin rpc:x:32:32:Portmapper RPC user:/:/sbin/nologin mailnull:x:47:47::/var/spool/mqueue:/sbin/nologin smmsp:x:51:51::/var/spool/mqueue:/sbin/nologin sshd:x:74:74:Privilege-separated SSH:/var/empty/sshd:/sbin/nologin postgres:x:26:26:PostgreSQL Server:/var/lib/pgsql:/bin/bash named:x:25:25:Named:/var/named:/sbin/nologin amanda:x:33:6:Amanda user:/var/lib/amanda:/bin/bash hsqldb:x:96:96::/var/lib/hsqldb:/sbin/nologin cimsrvr:x:101:500:tog-pegasus OpenPegasus WBEM/CIM services:/var/lib/Pegasus:/sbin/nologin radiusd:x:95:95:radiusd user:/home/radiusd:/sbin/nologin mailman:x:41:41:GNU Mailing List Manager:/usr/lib/mailman:/sbin/nologin ident:x:98:98::/:/sbin/nologin piranha:x:60:60::/etc/sysconfig/ha:/sbin/nologin postfix:x:89:89::/var/spool/postfix:/sbin/nologin webalizer:x:67:67:Webalizer:/var/www/usage:/sbin/nologin dovecot:x:97:97:dovecot:/usr/libexec/dovecot:/sbin/nologin pvm:x:24:24::/usr/share/pvm3:/bin/bash exim:x:93:93::/var/spool/exim:/sbin/nologin quagga:x:92:92:Quagga routing suite:/var/run/quagga:/sbin/nologin radvd:x:75:75:radvd user:/:/sbin/nologin privoxy:x:73:73::/etc/privoxy:/sbin/nologin oprofile:x:16:16:Special user account to be used by OProfile:/home/oprofile:/sbin/nologin squid:x:23:23::/var/spool/squid:/sbin/nologin luci:x:102:104::/var/lib/luci:/sbin/nologin rpcuser:x:29:29:RPC Service User:/var/lib/nfs:/sbin/nologin nfsnobody:x:65534:65534:Anonymous NFS User:/var/lib/nfs:/sbin/nologin xfs:x:43:43:X Font Server:/etc/X11/fs:/sbin/nologin qemu:x:103:105:qemu user:/:/sbin/nologin tomcat:x:91:91:Tomcat:/usr/share/tomcat5:/bin/sh ricci:x:104:156:ricci daemon user:/var/lib/ricci:/sbin/nologin haldaemon:x:68:68:HAL daemon:/:/sbin/nologin avahi-autoipd:x:105:157:avahi-autoipd:/var/lib/avahi-autoipd:/sbin/nologin gdm:x:42:42::/var/gdm:/sbin/nologin sabayon:x:86:86:Sabayon user:/home/sabayon:/sbin/nologin test:x:500:501:test user account:/home/test:/bin/tcsh alex:x:502:502:alex:/home/alex:/bin/csh tony:x:503:503:tony:/home/tony:/bin/csh james:x:504:504:james:/home/james:/bin/csh jake:x:505:505::/home/jake:/bin/bash james1:x:1001:1001:james1:/home/james1:/bin/csh james2:x:1002:1002:james2:/home/james2:/bin/csh james3:x:1003:1003:james3:/home/james3:/bin/csh james4:x:1004:1004:james4:/home/james4:/bin/csh james5:x:1005:1005:james5:/home/james5:/bin/csh james6:x:1006:1006:james6:/home/james6:/bin/csh james7:x:1007:1007:james7:/home/james7:/bin/csh james8:x:1008:1008:james8:/home/james8:/bin/csh james9:x:1009:1009:james9:/home/james9:/bin/csh james10:x:1010:1010:james10:/home/james10:/bin/csh james11:x:1011:1011:james11:/home/james11:/bin/csh james12:x:1012:1012:james12:/home/james12:/bin/csh james13:x:1013:1013:james13:/home/james13:/bin/csh james14:x:1014:1014:james14:/home/james14:/bin/csh james15:x:1015:1015:james15:/home/james15:/bin/csh james16:x:1016:1016:james16:/home/james16:/bin/csh james17:x:1017:1017:james17:/home/james17:/bin/csh james18:x:1018:1018:james18:/home/james18:/bin/csh james19:x:1019:1019:james19:/home/james19:/bin/csh james20:x:1020:1020:james20:/home/james20:/bin/csh james21:x:1021:1021:james21:/home/james21:/bin/csh james22:x:1022:1022:james22:/home/james22:/bin/csh james23:x:1023:1023:james23:/home/james23:/bin/csh james24:x:1024:1024:james24:/home/james24:/bin/csh james25:x:1025:1025:james25:/home/james25:/bin/csh james26:x:1026:1026:james26:/home/james26:/bin/csh james27:x:1027:1027:james27:/home/james27:/bin/csh james28:x:1028:1028:james28:/home/james28:/bin/csh james29:x:1029:1029:james29:/home/james29:/bin/csh james30:x:1030:1030:james30:/home/james30:/bin/csh james31:x:1031:1031:james31:/home/james31:/bin/csh james32:x:1032:1032:james32:/home/james32:/bin/csh james33:x:1033:1033:james33:/home/james33:/bin/csh james34:x:1034:1034:james34:/home/james34:/bin/csh james35:x:1035:1035:james35:/home/james35:/bin/csh james36:x:1036:1036:james36:/home/james36:/bin/csh james37:x:1037:1037:james37:/home/james37:/bin/csh james38:x:1038:1038:james38:/home/james38:/bin/csh james39:x:1039:1039:james39:/home/james39:/bin/csh james40:x:1040:1040:james40:/home/james40:/bin/csh james41:x:1041:1041:james41:/home/james41:/bin/csh james42:x:1042:1042:james42:/home/james42:/bin/csh james43:x:1043:1043:james43:/home/james43:/bin/csh james44:x:1044:1044:james44:/home/james44:/bin/csh james45:x:1045:1045:james45:/home/james45:/bin/csh james46:x:1046:1046:james46:/home/james46:/bin/csh james47:x:1047:1047:james47:/home/james47:/bin/csh james48:x:1048:1048:james48:/home/james48:/bin/csh james49:x:1049:1049:james49:/home/james49:/bin/csh james50:x:1050:1050:james50:/home/james50:/bin/csh james51:x:1051:1051:james51:/home/james51:/bin/csh james52:x:1052:1052:james52:/home/james52:/bin/csh james53:x:1053:1053:james53:/home/james53:/bin/csh james54:x:1054:1054:james54:/home/james54:/bin/csh james55:x:1055:1055:james55:/home/james55:/bin/csh james56:x:1056:1056:james56:/home/james56:/bin/csh james57:x:1057:1057:james57:/home/james57:/bin/csh james58:x:1058:1058:james58:/home/james58:/bin/csh james59:x:1059:1059:james59:/home/james59:/bin/csh james60:x:1060:1060:james60:/home/james60:/bin/csh james61:x:1061:1061:james61:/home/james61:/bin/csh james62:x:1062:1062:james62:/home/james62:/bin/csh james63:x:1063:1063:james63:/home/james63:/bin/csh james64:x:1064:1064:james64:/home/james64:/bin/csh james65:x:1065:1065:james65:/home/james65:/bin/csh james66:x:1066:1066:james66:/home/james66:/bin/csh james67:x:1067:1067:james67:/home/james67:/bin/csh james68:x:1068:1068:james68:/home/james68:/bin/csh james69:x:1069:1069:james69:/home/james69:/bin/csh james70:x:1070:1070:james70:/home/james70:/bin/csh james71:x:1071:1071:james71:/home/james71:/bin/csh james72:x:1072:1072:james72:/home/james72:/bin/csh james73:x:1073:1073:james73:/home/james73:/bin/csh james74:x:1074:1074:james74:/home/james74:/bin/csh james75:x:1075:1075:james75:/home/james75:/bin/csh james76:x:1076:1076:james76:/home/james76:/bin/csh james77:x:1077:1077:james77:/home/james77:/bin/csh james78:x:1078:1078:james78:/home/james78:/bin/csh james79:x:1079:1079:james79:/home/james79:/bin/csh james80:x:1080:1080:james80:/home/james80:/bin/csh james81:x:1081:1081:james81:/home/james81:/bin/csh james82:x:1082:1082:james82:/home/james82:/bin/csh james83:x:1083:1083:james83:/home/james83:/bin/csh james84:x:1084:1084:james84:/home/james84:/bin/csh james85:x:1085:1085:james85:/home/james85:/bin/csh james86:x:1086:1086:james86:/home/james86:/bin/csh james87:x:1087:1087:james87:/home/james87:/bin/csh james88:x:1088:1088:james88:/home/james88:/bin/csh james89:x:1089:1089:james89:/home/james89:/bin/csh james90:x:1090:1090:james90:/home/james90:/bin/csh james91:x:1091:1091:james91:/home/james91:/bin/csh james92:x:1092:1092:james92:/home/james92:/bin/csh james93:x:1093:1093:james93:/home/james93:/bin/csh james94:x:1094:1094:james94:/home/james94:/bin/csh james95:x:1095:1095:james95:/home/james95:/bin/csh james96:x:1096:1096:james96:/home/james96:/bin/csh james97:x:1097:1097:james97:/home/james97:/bin/csh james98:x:1098:1098:james98:/home/james98:/bin/csh james99:x:1099:1099:james99:/home/james99:/bin/csh james100:x:1100:1100:james100:/home/james100:/bin/csh james101:x:1101:1101:james101:/home/james101:/bin/csh james102:x:1102:1102:james102:/home/james102:/bin/csh james103:x:1103:1103:james103:/home/james103:/bin/csh james104:x:1104:1104:james104:/home/james104:/bin/csh james105:x:1105:1105:james105:/home/james105:/bin/csh james106:x:1106:1106:james106:/home/james106:/bin/csh james107:x:1107:1107:james107:/home/james107:/bin/csh james108:x:1108:1108:james108:/home/james108:/bin/csh james109:x:1109:1109:james109:/home/james109:/bin/csh james110:x:1110:1110:james110:/home/james110:/bin/csh james111:x:1111:1111:james111:/home/james111:/bin/csh james112:x:1112:1112:james112:/home/james112:/bin/csh james113:x:1113:1113:james113:/home/james113:/bin/csh james114:x:1114:1114:james114:/home/james114:/bin/csh james115:x:1115:1115:james115:/home/james115:/bin/csh james116:x:1116:1116:james116:/home/james116:/bin/csh james117:x:1117:1117:james117:/home/james117:/bin/csh james118:x:1118:1118:james118:/home/james118:/bin/csh james119:x:1119:1119:james119:/home/james119:/bin/csh james120:x:1120:1120:james120:/home/james120:/bin/csh james121:x:1121:1121:james121:/home/james121:/bin/csh james122:x:1122:1122:james122:/home/james122:/bin/csh james123:x:1123:1123:james123:/home/james123:/bin/csh james124:x:1124:1124:james124:/home/james124:/bin/csh james125:x:1125:1125:james125:/home/james125:/bin/csh james126:x:1126:1126:james126:/home/james126:/bin/csh james127:x:1127:1127:james127:/home/james127:/bin/csh james128:x:1128:1128:james128:/home/james128:/bin/csh james129:x:1129:1129:james129:/home/james129:/bin/csh james130:x:1130:1130:james130:/home/james130:/bin/csh james131:x:1131:1131:james131:/home/james131:/bin/csh james132:x:1132:1132:james132:/home/james132:/bin/csh james133:x:1133:1133:james133:/home/james133:/bin/csh james134:x:1134:1134:james134:/home/james134:/bin/csh james135:x:1135:1135:james135:/home/james135:/bin/csh james136:x:1136:1136:james136:/home/james136:/bin/csh james137:x:1137:1137:james137:/home/james137:/bin/csh james138:x:1138:1138:james138:/home/james138:/bin/csh james139:x:1139:1139:james139:/home/james139:/bin/csh james140:x:1140:1140:james140:/home/james140:/bin/csh james141:x:1141:1141:james141:/home/james141:/bin/csh james142:x:1142:1142:james142:/home/james142:/bin/csh james143:x:1143:1143:james143:/home/james143:/bin/csh james144:x:1144:1144:james144:/home/james144:/bin/csh james145:x:1145:1145:james145:/home/james145:/bin/csh james146:x:1146:1146:james146:/home/james146:/bin/csh james147:x:1147:1147:james147:/home/james147:/bin/csh james148:x:1148:1148:james148:/home/james148:/bin/csh james149:x:1149:1149:james149:/home/james149:/bin/csh james150:x:1150:1150:james150:/home/james150:/bin/csh james151:x:1151:1151:james151:/home/james151:/bin/csh james152:x:1152:1152:james152:/home/james152:/bin/csh james153:x:1153:1153:james153:/home/james153:/bin/csh james154:x:1154:1154:james154:/home/james154:/bin/csh james155:x:1155:1155:james155:/home/james155:/bin/csh james156:x:1156:1156:james156:/home/james156:/bin/csh james157:x:1157:1157:james157:/home/james157:/bin/csh james158:x:1158:1158:james158:/home/james158:/bin/csh james159:x:1159:1159:james159:/home/james159:/bin/csh james160:x:1160:1160:james160:/home/james160:/bin/csh james161:x:1161:1161:james161:/home/james161:/bin/csh james162:x:1162:1162:james162:/home/james162:/bin/csh james163:x:1163:1163:james163:/home/james163:/bin/csh james164:x:1164:1164:james164:/home/james164:/bin/csh james165:x:1165:1165:james165:/home/james165:/bin/csh james166:x:1166:1166:james166:/home/james166:/bin/csh james167:x:1167:1167:james167:/home/james167:/bin/csh james168:x:1168:1168:james168:/home/james168:/bin/csh james169:x:1169:1169:james169:/home/james169:/bin/csh james170:x:1170:1170:james170:/home/james170:/bin/csh james171:x:1171:1171:james171:/home/james171:/bin/csh james172:x:1172:1172:james172:/home/james172:/bin/csh james173:x:1173:1173:james173:/home/james173:/bin/csh james174:x:1174:1174:james174:/home/james174:/bin/csh james175:x:1175:1175:james175:/home/james175:/bin/csh james176:x:1176:1176:james176:/home/james176:/bin/csh james177:x:1177:1177:james177:/home/james177:/bin/csh james178:x:1178:1178:james178:/home/james178:/bin/csh james179:x:1179:1179:james179:/home/james179:/bin/csh james180:x:1180:1180:james180:/home/james180:/bin/csh james181:x:1181:1181:james181:/home/james181:/bin/csh james182:x:1182:1182:james182:/home/james182:/bin/csh james183:x:1183:1183:james183:/home/james183:/bin/csh james184:x:1184:1184:james184:/home/james184:/bin/csh james185:x:1185:1185:james185:/home/james185:/bin/csh james186:x:1186:1186:james186:/home/james186:/bin/csh james187:x:1187:1187:james187:/home/james187:/bin/csh james188:x:1188:1188:james188:/home/james188:/bin/csh james189:x:1189:1189:james189:/home/james189:/bin/csh james190:x:1190:1190:james190:/home/james190:/bin/csh james191:x:1191:1191:james191:/home/james191:/bin/csh [root@centos58-s ~]# cat /etc/idmapd.conf [General] #Verbosity = 0 # The following should be set to the local NFSv4 domain name # The default is the host's DNS domain name. #Domain = v4test Domain = v4test.wwtech # The following is a comma-separated list of Kerberos realm # names that should be considered to be equivalent to the # local realm, such that <user>@REALM.A can be assumed to # be the same user as <user>@REALM.B # If not specified, the default local realm is the domain name, # which defaults to the host's DNS domain name, # translated to upper-case. # Note that if this value is specified, the local realm name # must be included in the list! #Local-Realms = [Mapping] Nobody-User = nobody Nobody-Group = nobody [Translation] # Translation Method is an comma-separated, ordered list of # translation methods that can be used. Distributed methods # include "nsswitch", "umich_ldap", and "static". Each method # is a dynamically loadable plugin library. # New methods may be defined and inserted in the list. # The default is "nsswitch". Method = nsswitch # Optional. This is a comma-separated, ordered list of # translation methods to be used for translating GSS # authenticated names to ids. # If this option is omitted, the same methods as those # specified in "Method" are used. #GSS-Methods = <alternate method list for translating GSS names> #-------------------------------------------------------------------# # The following are used only for the "static" Translation Method. #-------------------------------------------------------------------# [Static] # A "static" list of GSS-Authenticated names to # local user name mappings #someuser@REALM = localuser #-------------------------------------------------------------------# # The following are used only for the "umich_ldap" Translation Method. #-------------------------------------------------------------------# #[UMICH_SCHEMA] # server information (REQUIRED) #LDAP_server = ldap-server.local.domain.edu # the default search base (REQUIRED) #LDAP_base = dc=local,dc=domain,dc=edu #-----------------------------------------------------------# # The remaining options have defaults (as shown) # and are therefore not required. #-----------------------------------------------------------# # whether or not to perform canonicalization on the # name given as LDAP_server #LDAP_canonicalize_name = true # absolute search base for (people) accounts #LDAP_people_base = <LDAP_base> # absolute search base for groups #LDAP_group_base = <LDAP_base> # Set to true to enable SSL - anything else is not enabled #LDAP_use_ssl = false # You must specify a CA certificate location if you enable SSL #LDAP_ca_cert = /etc/ldapca.cert # Objectclass mapping information # Mapping for the person (account) object class #NFSv4_person_objectclass = NFSv4RemotePerson # Mapping for the nfsv4name attribute the person object #NFSv4_name_attr = NFSv4Name # Mapping for the UID number #NFSv4_uid_attr = UIDNumber # Mapping for the GSSAPI Principal name #GSS_principal_attr = GSSAuthName # Mapping for the account name attribute (usually uid) # The value for this attribute must match the value of # the group member attribute - NFSv4_member_attr #NFSv4_acctname_attr = uid # Mapping for the group object class #NFSv4_group_objectclass = NFSv4RemoteGroup # Mapping for the GID attribute #NFSv4_gid_attr = GIDNumber # Mapping for the Group NFSv4 name #NFSv4_group_attr = NFSv4Name # Mapping for the Group member attribute (usually memberUID) # The value of this attribute must match the value of NFSv4_acctname_attr #NFSv4_member_attr = memberUID ------------------------------------------------------------------------- NIS Client: [root@centos58-c ~]# uname -a Linux centos58-c 2.6.18-308.el5 #1 SMP Tue Feb 21 20:06:06 EST 2012 x86_64 x86_64 x86_64 GNU/Linux [root@centos58-c ~]# cat /etc/yp.conf # /etc/yp.conf - ypbind configuration file # Valid entries are # # domain NISDOMAIN server HOSTNAME # Use server HOSTNAME for the domain NISDOMAIN. # # domain NISDOMAIN broadcast # Use broadcast on the local net for domain NISDOMAIN # # domain NISDOMAIN slp # Query local SLP server for ypserver supporting NISDOMAIN # # ypserver HOSTNAME # Use server HOSTNAME for the local domain. The # IP-address of server must be listed in /etc/hosts. # # broadcast # If no server for the default domain is specified or # none of them is rechable, try a broadcast call to # find a server. # #domain hslab.wwtech server 192.168.100.21 domain hslab.wwtech broadcast [root@centos58-c ~]# cat /etc/hosts # Do not remove the following line, or various programs # that require network functionality will fail. 127.0.0.1 centos58-c localhost.localdomain localhost ::1 localhost6.localdomain6 localhost6 [root@centos58-c ~]# cat /etc/idmapd.conf [General] #Verbosity = 0 # The following should be set to the local NFSv4 domain name # The default is the host's DNS domain name. #Domain = local.domain.edu Domain = v4test.wwtech # The following is a comma-separated list of Kerberos realm # names that should be considered to be equivalent to the # local realm, such that <user>@REALM.A can be assumed to # be the same user as <user>@REALM.B # If not specified, the default local realm is the domain name, # which defaults to the host's DNS domain name, # translated to upper-case. # Note that if this value is specified, the local realm name # must be included in the list! #Local-Realms = [Mapping] Nobody-User = nobody Nobody-Group = nobody [Translation] # Translation Method is an comma-separated, ordered list of # translation methods that can be used. Distributed methods # include "nsswitch", "umich_ldap", and "static". Each method # is a dynamically loadable plugin library. # New methods may be defined and inserted in the list. # The default is "nsswitch". Method = nsswitch # Optional. This is a comma-separated, ordered list of # translation methods to be used for translating GSS # authenticated names to ids. # If this option is omitted, the same methods as those # specified in "Method" are used. #GSS-Methods = <alternate method list for translating GSS names> #-------------------------------------------------------------------# # The following are used only for the "static" Translation Method. #-------------------------------------------------------------------# [Static] # A "static" list of GSS-Authenticated names to # local user name mappings #someuser@REALM = localuser #-------------------------------------------------------------------# # The following are used only for the "umich_ldap" Translation Method. #-------------------------------------------------------------------# #[UMICH_SCHEMA] # server information (REQUIRED) #LDAP_server = ldap-server.local.domain.edu # the default search base (REQUIRED) #LDAP_base = dc=local,dc=domain,dc=edu #-----------------------------------------------------------# # The remaining options have defaults (as shown) # and are therefore not required. #-----------------------------------------------------------# # whether or not to perform canonicalization on the # name given as LDAP_server #LDAP_canonicalize_name = true # absolute search base for (people) accounts #LDAP_people_base = <LDAP_base> # absolute search base for groups #LDAP_group_base = <LDAP_base> # Set to true to enable SSL - anything else is not enabled #LDAP_use_ssl = false # You must specify a CA certificate location if you enable SSL #LDAP_ca_cert = /etc/ldapca.cert # Objectclass mapping information # Mapping for the person (account) object class #NFSv4_person_objectclass = NFSv4RemotePerson # Mapping for the nfsv4name attribute the person object #NFSv4_name_attr = NFSv4Name # Mapping for the UID number #NFSv4_uid_attr = UIDNumber # Mapping for the GSSAPI Principal name #GSS_principal_attr = GSSAuthName # Mapping for the account name attribute (usually uid) # The value for this attribute must match the value of # the group member attribute - NFSv4_member_attr #NFSv4_acctname_attr = uid # Mapping for the group object class #NFSv4_group_objectclass = NFSv4RemoteGroup # Mapping for the GID attribute #NFSv4_gid_attr = GIDNumber # Mapping for the Group NFSv4 name #NFSv4_group_attr = NFSv4Name # Mapping for the Group member attribute (usually memberUID) # The value of this attribute must match the value of NFSv4_acctname_attr #NFSv4_member_attr = memberUID [root@centos58-c ~]# df -h Filesystem Size Used Avail Use% Mounted on /dev/sda1 19G 7.3G 11G 42% / tmpfs 1006M 0 1006M 0% /dev/shm tpcdot832:/nfs 973M 192K 973M 1% /mnt/nfs [root@centos58-c ~]# mount /dev/sda1 on / type ext3 (rw) proc on /proc type proc (rw) sysfs on /sys type sysfs (rw) devpts on /dev/pts type devpts (rw,gid=5,mode=620) tmpfs on /dev/shm type tmpfs (rw) none on /proc/sys/fs/binfmt_misc type binfmt_misc (rw) sunrpc on /var/lib/nfs/rpc_pipefs type rpc_pipefs (rw) tpcdot832:/nfs on /mnt/nfs type nfs4 (rw,addr=192.168.50.204) ------------------------------------------------------------------------- NetApp filer: fas2520A::*> vserver show -vserver vm_data Vserver: vm_data Vserver Type: data Vserver Subtype: default Vserver UUID: 41261cf1-84b5-11e6-8b4e-00a0987ddbd4 Root Volume: vm_data_root Aggregate: aggr01_data NIS Domain: hslab.wwtech Root Volume Security Style: unix LDAP Client: - Default Volume Language Code: C.UTF-8 Snapshot Policy: default Comment: Quota Policy: default List of Aggregates Assigned: - Limit on Maximum Number of Volumes allowed: unlimited Vserver Admin State: running Vserver Operational State: running Vserver Operational State Stopped Reason: - Allowed Protocols: nfs Disallowed Protocols: cifs, fcp, iscsi, ndmp Is Vserver with Infinite Volume: false QoS Policy Group: - Config Lock: false Volume Delete Retention Period: 12 IPspace Name: Default Is Msid Preserved for DR: false fas2520A::*> vserver nfs show -vserver vm_data Vserver: vm_data General NFS Access: true RPC GSS Context Cache High Water Mark: 0 RPC GSS Context Idle: 0 NFS v3: enabled NFS v4.0: enabled UDP Protocol: enabled TCP Protocol: enabled Default Windows User: - Enable NFSv3 EJUKEBOX error: true Require All NFSv3 Reads to Return Read Attributes: false Show Change in FSID as NFSv3 Clients Traverse Filesystems: enabled Enable the Dropping of a Connection When an NFSv3 Request is Dropped: enabled Vserver NTFS Unix Security Options: use_export_policy Vserver Change Ownership Mode: use_export_policy Force Usage of SpinNp Readdir Requests: false NFS Response Trace Enabled: false NFS Response Trigger (secs): 60 UDP Maximum Transfer Size (bytes): 32768 TCP Maximum Transfer Size (bytes): 65536 (DEPRECATED)-NFSv3 TCP Maximum Read Size (bytes): 65536 (DEPRECATED)-NFSv3 TCP Maximum Write Size (bytes): 65536 NFSv4.0 ACL Support: enabled NFSv4.0 Read Delegation Support: disabled NFSv4.0 Write Delegation Support: disabled Show Change in FSID as NFSv4 Clients Traverse Filesystems: enabled NFSv4.0 Referral Support: disabled NFSv4 ID Mapping Domain: v4test.wwtech NFSv4 Validate UTF-8 Encoding of Symbolic Link Data: disabled NFSv4 Lease Timeout Value (in secs): 30 NFSv4 Grace Timeout Value (in secs): 45 Preserves and Modifies NFSv4 ACL (and NTFS File Permissions in Unified Security Style): enabled NFSv4.1 Minor Version Support: disabled Rquota Enable: disabled NFSv4.1 Implementation ID Domain: netapp.com NFSv4.1 Implementation ID Name: NetApp Release 8.3.2P5 NFSv4.1 Implementation ID Date: Tue Aug 23 12:36:56 2016 NFSv4.1 Parallel NFS Support: enabled NFSv4.0 Migration Support: disabled NFSv4.1 Referral Support: disabled NFSv4.1 Migration Support: disabled NFSv4.1 ACL Support: disabled NFS vStorage Support: disabled NFSv4 Support for Numeric Owner IDs: enabled Default Windows Group: - NFSv4.1 Read Delegation Support: disabled NFSv4.1 Write Delegation Support: disabled Number of Slots in the NFSv4.x Session slot tables: 180 Size of the Reply that will be Cached in Each NFSv4.x Session Slot (in bytes): 640 Maximum Number of ACEs per ACL: 400 NFS Mount Root Only: enabled NFS Root Only: disabled Qtree Exports Enabled: disabled AUTH_SYS Extended Groups Enabled: disabled AUTH_SYS and RPCSEC_GSS Auxillary Groups Limit: 32 Validation of Qtree IDs for Qtree File Operations: enabled NFS Mount Daemon Port: 635 Network Lock Manager Port: 4045 Network Status Monitor Port: 4046 NFS Quota Daemon Port: 4049 Permitted Kerberos Encryption Types: des, des3, aes-128, aes-256 Showmount Enabled: enabled Set the Protocol Used for Name Services Lookups for Exports: udp Map Unknown UID to Default Windows User: enable DNS Domain Search Enabled During Netgroup Lookup: enabled Trust No-Match Result from Any Name Service Switch Source During Netgroup Lookup: disabled Display maximum NT ACL Permissions to NFS Client: disabled NFSv3 MS-DOS Client Support: disabled Ignore the NT ACL Check for NFS User 'root': disabled Time To Live Value (in msecs) of a Positive Cached Credential: 86400000 Time To Live Value (in msecs) of a Negative Cached Credential: 7200000 Time To Live Value (in msecs) of a Cached Entry for a Transient Error: 30000 Skip Permission Check for NFS Write Calls from Root/Owner: disabled fas2520A::*> Script: [root@centos58-c ~]# cat nfs4_setfacl.sh #!/bin/sh for i in `ypcat passwd | grep james | cut -f1 -d: ` do echo " nfs4_setfacl -a A::$i:R /mnt/nfs/test" #sleep 1s nfs4_setfacl -a A::$i:R /mnt/nfs/test #sleep 1s #nfs4_getfacl /mnt/nfs/test done echo "ypcat passwd | grep james | cut -f1 -d: | wc -l" echo "`ypcat passwd | grep james | cut -f1 -d: | wc -l`" # workaround # nfs4_setfacl -s A::root:RWX /mnt/nfs/test ~~~ Steps to Reproduce: ./nfs4_setfacl.sh nfs4_setfacl -a A::james43:RWX /mnt/nfs/test nfs4_setfacl -a A::james178:RWX /mnt/nfs/test nfs4_setfacl -a A::james165:RWX /mnt/nfs/test nfs4_setfacl -a A::james56:RWX /mnt/nfs/test nfs4_setfacl -a A::james152:RWX /mnt/nfs/test nfs4_setfacl -a A::james44:RWX /mnt/nfs/test nfs4_setfacl -a A::james188:RWX /mnt/nfs/test nfs4_setfacl -a A::james175:RWX /mnt/nfs/test nfs4_setfacl -a A::james57:RWX /mnt/nfs/test nfs4_setfacl -a A::james45:RWX /mnt/nfs/test nfs4_setfacl -a A::james33:RWX /mnt/nfs/test nfs4_setfacl -a A::james46:RWX /mnt/nfs/test nfs4_setfacl -a A::james171:RWX /mnt/nfs/test nfs4_setfacl -a A::james34:RWX /mnt/nfs/test nfs4_setfacl -a A::james108:RWX /mnt/nfs/test nfs4_setfacl -a A::james47:RWX /mnt/nfs/test nfs4_setfacl -a A::james181:RWX /mnt/nfs/test nfs4_setfacl -a A::james35:RWX /mnt/nfs/test nfs4_setfacl -a A::james23:RWX /mnt/nfs/test nfs4_setfacl -a A::james191:RWX /mnt/nfs/test nfs4_setfacl -a A::james36:RWX /mnt/nfs/test nfs4_setfacl -a A::james104:RWX /mnt/nfs/test nfs4_setfacl -a A::james24:RWX /mnt/nfs/test nfs4_setfacl -a A::james127:RWX /mnt/nfs/test nfs4_setfacl -a A::james114:RWX /mnt/nfs/test nfs4_setfacl -a A::james25:RWX /mnt/nfs/test nfs4_setfacl -a A::james13:RWX /mnt/nfs/test nfs4_setfacl -a A::james101:RWX /mnt/nfs/test nfs4_setfacl -a A::james137:RWX /mnt/nfs/test nfs4_setfacl -a A::james9:RWX /mnt/nfs/test nfs4_setfacl -a A::james124:RWX /mnt/nfs/test nfs4_setfacl -a A::james26:RWX /mnt/nfs/test nfs4_setfacl -a A::james14:RWX /mnt/nfs/test nfs4_setfacl -a A::james111:RWX /mnt/nfs/test nfs4_setfacl -a A::james147:RWX /mnt/nfs/test nfs4_setfacl -a A::james134:RWX /mnt/nfs/test nfs4_setfacl -a A::james15:RWX /mnt/nfs/test nfs4_setfacl -a A::james157:RWX /mnt/nfs/test nfs4_setfacl -a A::james121:RWX /mnt/nfs/test nfs4_setfacl -a A::james8:RWX /mnt/nfs/test nfs4_setfacl -a A::james16:RWX /mnt/nfs/test nfs4_setfacl -a A::james94:RWX /mnt/nfs/test nfs4_setfacl -a A::james153:RWX /mnt/nfs/test nfs4_setfacl -a A::james140:RWX /mnt/nfs/test nfs4_setfacl -a A::james176:RWX /mnt/nfs/test nfs4_setfacl -a A::james95:RWX /mnt/nfs/test nfs4_setfacl -a A::james7:RWX /mnt/nfs/test nfs4_setfacl -a A::james163:RWX /mnt/nfs/test nfs4_setfacl -a A::james150:RWX /mnt/nfs/test nfs4_setfacl -a A::james186:RWX /mnt/nfs/test nfs4_setfacl -a A::james96:RWX /mnt/nfs/test nfs4_setfacl -a A::james173:RWX /mnt/nfs/test nfs4_setfacl -a A::james84:RWX /mnt/nfs/test nfs4_setfacl -a A::james160:RWX /mnt/nfs/test nfs4_setfacl -a A::james109:RWX /mnt/nfs/test nfs4_setfacl -a A::james97:RWX /mnt/nfs/test nfs4_setfacl -a A::james183:RWX /mnt/nfs/test nfs4_setfacl -a A::james85:RWX /mnt/nfs/test nfs4_setfacl -a A::james6:RWX /mnt/nfs/test nfs4_setfacl -a A::james170:RWX /mnt/nfs/test nfs4_setfacl -a A::james119:RWX /mnt/nfs/test nfs4_setfacl -a A::james98:RWX /mnt/nfs/test nfs4_setfacl -a A::james86:RWX /mnt/nfs/test nfs4_setfacl -a A::james:RWX /mnt/nfs/test nfs4_setfacl -a A::james74:RWX /mnt/nfs/test nfs4_setfacl -a A::james106:RWX /mnt/nfs/test nfs4_setfacl -a A::james129:RWX /mnt/nfs/test nfs4_setfacl -a A::james87:RWX /mnt/nfs/test nfs4_setfacl -a A::james75:RWX /mnt/nfs/test nfs4_setfacl -a A::james5:RWX /mnt/nfs/test nfs4_setfacl -a A::james116:RWX /mnt/nfs/test nfs4_setfacl -a A::james139:RWX /mnt/nfs/test nfs4_setfacl -a A::james103:RWX /mnt/nfs/test nfs4_setfacl -a A::james88:RWX /mnt/nfs/test nfs4_setfacl -a A::james126:RWX /mnt/nfs/test nfs4_setfacl -a A::james76:RWX /mnt/nfs/test nfs4_setfacl -a A::james64:RWX /mnt/nfs/test nfs4_setfacl -a A::james77:RWX /mnt/nfs/test nfs4_setfacl -a A::james65:RWX /mnt/nfs/test nfs4_setfacl -a A::james53:RWX /mnt/nfs/test nfs4_setfacl -a A::james122:RWX /mnt/nfs/test nfs4_setfacl -a A::james158:RWX /mnt/nfs/test nfs4_setfacl -a A::james145:RWX /mnt/nfs/test nfs4_setfacl -a A::james66:RWX /mnt/nfs/test nfs4_setfacl -a A::james54:RWX /mnt/nfs/test nfs4_setfacl -a A::james132:RWX /mnt/nfs/test nfs4_setfacl -a A::james168:RWX /mnt/nfs/test nfs4_setfacl -a A::james155:RWX /mnt/nfs/test nfs4_setfacl -a A::james67:RWX /mnt/nfs/test nfs4_setfacl -a A::james55:RWX /mnt/nfs/test nfs4_setfacl -a A::james142:RWX /mnt/nfs/test nfs4_setfacl -a A::james17:RWX /mnt/nfs/test nfs4_setfacl -a A::james141:RWX /mnt/nfs/test nfs4_setfacl -a A::james31:RWX /mnt/nfs/test nfs4_setfacl -a A::james177:RWX /mnt/nfs/test nfs4_setfacl -a A::james164:RWX /mnt/nfs/test nfs4_setfacl -a A::james18:RWX /mnt/nfs/test nfs4_setfacl -a A::james151:RWX /mnt/nfs/test nfs4_setfacl -a A::james32:RWX /mnt/nfs/test nfs4_setfacl -a A::james187:RWX /mnt/nfs/test nfs4_setfacl -a A::james20:RWX /mnt/nfs/test nfs4_setfacl -a A::james174:RWX /mnt/nfs/test nfs4_setfacl -a A::james19:RWX /mnt/nfs/test nfs4_setfacl -a A::james161:RWX /mnt/nfs/test nfs4_setfacl -a A::james21:RWX /mnt/nfs/test nfs4_setfacl -a A::james184:RWX /mnt/nfs/test nfs4_setfacl -a A::james22:RWX /mnt/nfs/test nfs4_setfacl -a A::james10:RWX /mnt/nfs/test nfs4_setfacl -a A::james107:RWX /mnt/nfs/test nfs4_setfacl -a A::james180:RWX /mnt/nfs/test nfs4_setfacl -a A::james11:RWX /mnt/nfs/test nfs4_setfacl -a A::james99:RWX /mnt/nfs/test nfs4_setfacl -a A::james117:RWX /mnt/nfs/test nfs4_setfacl -a A::james190:RWX /mnt/nfs/test nfs4_setfacl -a A::james12:RWX /mnt/nfs/test nfs4_setfacl -a A::james90:RWX /mnt/nfs/test nfs4_setfacl -a A::james113:RWX /mnt/nfs/test nfs4_setfacl -a A::james149:RWX /mnt/nfs/test nfs4_setfacl -a A::james89:RWX /mnt/nfs/test nfs4_setfacl -a A::james100:RWX /mnt/nfs/test nfs4_setfacl -a A::james136:RWX /mnt/nfs/test nfs4_setfacl -a A::james91:RWX /mnt/nfs/test nfs4_setfacl -a A::james4:RWX /mnt/nfs/test nfs4_setfacl -a A::james123:RWX /mnt/nfs/test nfs4_setfacl -a A::james159:RWX /mnt/nfs/test nfs4_setfacl -a A::james110:RWX /mnt/nfs/test nfs4_setfacl -a A::james78:RWX /mnt/nfs/test nfs4_setfacl -a A::james146:RWX /mnt/nfs/test nfs4_setfacl -a A::james92:RWX /mnt/nfs/test nfs4_setfacl -a A::james133:RWX /mnt/nfs/test nfs4_setfacl -a A::james80:RWX /mnt/nfs/test nfs4_setfacl -a A::james169:RWX /mnt/nfs/test nfs4_setfacl -a A::james156:RWX /mnt/nfs/test nfs4_setfacl -a A::james120:RWX /mnt/nfs/test nfs4_setfacl -a A::james79:RWX /mnt/nfs/test nfs4_setfacl -a A::james93:RWX /mnt/nfs/test nfs4_setfacl -a A::james143:RWX /mnt/nfs/test nfs4_setfacl -a A::james81:RWX /mnt/nfs/test nfs4_setfacl -a A::james3:RWX /mnt/nfs/test nfs4_setfacl -a A::james179:RWX /mnt/nfs/test nfs4_setfacl -a A::james130:RWX /mnt/nfs/test nfs4_setfacl -a A::james166:RWX /mnt/nfs/test nfs4_setfacl -a A::james68:RWX /mnt/nfs/test nfs4_setfacl -a A::james189:RWX /mnt/nfs/test nfs4_setfacl -a A::james82:RWX /mnt/nfs/test nfs4_setfacl -a A::james70:RWX /mnt/nfs/test nfs4_setfacl -a A::james69:RWX /mnt/nfs/test nfs4_setfacl -a A::james83:RWX /mnt/nfs/test nfs4_setfacl -a A::james162:RWX /mnt/nfs/test nfs4_setfacl -a A::james71:RWX /mnt/nfs/test nfs4_setfacl -a A::james2:RWX /mnt/nfs/test nfs4_setfacl -a A::james185:RWX /mnt/nfs/test nfs4_setfacl -a A::james58:RWX /mnt/nfs/test nfs4_setfacl -a A::james172:RWX /mnt/nfs/test nfs4_setfacl -a A::james72:RWX /mnt/nfs/test nfs4_setfacl -a A::james60:RWX /mnt/nfs/test nfs4_setfacl -a A::james59:RWX /mnt/nfs/test nfs4_setfacl -a A::james182:RWX /mnt/nfs/test nfs4_setfacl -a A::james73:RWX /mnt/nfs/test nfs4_setfacl -a A::james61:RWX /mnt/nfs/test nfs4_setfacl -a A::james1:RWX /mnt/nfs/test nfs4_setfacl -a A::james118:RWX /mnt/nfs/test nfs4_setfacl -a A::james48:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james105:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james62:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james50:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james128:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james49:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james115:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james37:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james63:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james51:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james138:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james102:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james125:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james38:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james52:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james148:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james40:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james112:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james135:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james39:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james27:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james41:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james144:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james28:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james42:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james131:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james30:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james167:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james154:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. nfs4_setfacl -a A::james29:RWX /mnt/nfs/test Failed getxattr operation: Invalid argument Failed to instantiate ACL. Expected results: No "Failed getxattr operation: Invalid argument" Additional info:
The above steps could reproduce on my RHEL env: NIS server is Red Hat Enterprise Linux Server release 6u8 NIS client is Red Hat Enterprise Linux Server release 6u2 Netapp-fas2554 storage nfs4-acl-tools-0.3.3-5.el6.x86_64
Hello, I implemented the same steps on rhel7.2 and found the issue was gone, everything is okay. [root@rhel7u2 ~]# ./nfs4_setfacl.sh nfs4_setfacl -a A::user13:R /nfs/file nfs4_setfacl -a A::user91:R /nfs/file nfs4_setfacl -a A::user168:R /nfs/file nfs4_setfacl -a A::user156:R /nfs/file nfs4_setfacl -a A::user144:R /nfs/file nfs4_setfacl -a A::user44:R /nfs/file nfs4_setfacl -a A::user56:R /nfs/file nfs4_setfacl -a A::user68:R /nfs/file nfs4_setfacl -a A::user157:R /nfs/file nfs4_setfacl -a A::user145:R /nfs/file nfs4_setfacl -a A::user12:R /nfs/file nfs4_setfacl -a A::user90:R /nfs/file nfs4_setfacl -a A::user158:R /nfs/file nfs4_setfacl -a A::user146:R /nfs/file nfs4_setfacl -a A::user134:R /nfs/file nfs4_setfacl -a A::user43:R /nfs/file nfs4_setfacl -a A::user55:R /nfs/file nfs4_setfacl -a A::user3:R /nfs/file nfs4_setfacl -a A::user67:R /nfs/file nfs4_setfacl -a A::user147:R /nfs/file nfs4_setfacl -a A::user79:R /nfs/file nfs4_setfacl -a A::user135:R /nfs/file nfs4_setfacl -a A::user11:R /nfs/file nfs4_setfacl -a A::user148:R /nfs/file nfs4_setfacl -a A::user136:R /nfs/file nfs4_setfacl -a A::user124:R /nfs/file nfs4_setfacl -a A::user42:R /nfs/file nfs4_setfacl -a A::user54:R /nfs/file nfs4_setfacl -a A::user66:R /nfs/file nfs4_setfacl -a A::user137:R /nfs/file nfs4_setfacl -a A::user78:R /nfs/file nfs4_setfacl -a A::user125:R /nfs/file nfs4_setfacl -a A::user113:R /nfs/file nfs4_setfacl -a A::user19:R /nfs/file nfs4_setfacl -a A::user6:R /nfs/file nfs4_setfacl -a A::user126:R /nfs/file nfs4_setfacl -a A::user114:R /nfs/file nfs4_setfacl -a A::user41:R /nfs/file nfs4_setfacl -a A::user53:R /nfs/file nfs4_setfacl -a A::user65:R /nfs/file nfs4_setfacl -a A::user127:R /nfs/file nfs4_setfacl -a A::user115:R /nfs/file nfs4_setfacl -a A::user103:R /nfs/file nfs4_setfacl -a A::user18:R /nfs/file nfs4_setfacl -a A::user116:R /nfs/file nfs4_setfacl -a A::user104:R /nfs/file nfs4_setfacl -a A::user40:R /nfs/file nfs4_setfacl -a A::user52:R /nfs/file nfs4_setfacl -a A::user64:R /nfs/file nfs4_setfacl -a A::user117:R /nfs/file nfs4_setfacl -a A::user105:R /nfs/file nfs4_setfacl -a A::user195:R /nfs/file nfs4_setfacl -a A::user17:R /nfs/file nfs4_setfacl -a A::user29:R /nfs/file nfs4_setfacl -a A::user7:R /nfs/file nfs4_setfacl -a A::user106:R /nfs/file nfs4_setfacl -a A::user196:R /nfs/file nfs4_setfacl -a A::user51:R /nfs/file nfs4_setfacl -a A::user63:R /nfs/file nfs4_setfacl -a A::user107:R /nfs/file nfs4_setfacl -a A::user197:R /nfs/file nfs4_setfacl -a A::user185:R /nfs/file nfs4_setfacl -a A::user16:R /nfs/file nfs4_setfacl -a A::user198:R /nfs/file nfs4_setfacl -a A::user186:R /nfs/file nfs4_setfacl -a A::user50:R /nfs/file nfs4_setfacl -a A::user1:R /nfs/file nfs4_setfacl -a A::user62:R /nfs/file nfs4_setfacl -a A::user59:R /nfs/file nfs4_setfacl -a A::user199:R /nfs/file nfs4_setfacl -a A::user187:R /nfs/file nfs4_setfacl -a A::user175:R /nfs/file nfs4_setfacl -a A::user15:R /nfs/file nfs4_setfacl -a A::user93:R /nfs/file nfs4_setfacl -a A::user8:R /nfs/file nfs4_setfacl -a A::user188:R /nfs/file nfs4_setfacl -a A::user176:R /nfs/file nfs4_setfacl -a A::user190:R /nfs/file nfs4_setfacl -a A::user61:R /nfs/file nfs4_setfacl -a A::user58:R /nfs/file nfs4_setfacl -a A::user189:R /nfs/file nfs4_setfacl -a A::user177:R /nfs/file nfs4_setfacl -a A::user165:R /nfs/file nfs4_setfacl -a A::user14:R /nfs/file nfs4_setfacl -a A::user92:R /nfs/file nfs4_setfacl -a A::user178:R /nfs/file nfs4_setfacl -a A::user166:R /nfs/file nfs4_setfacl -a A::user154:R /nfs/file nfs4_setfacl -a A::user180:R /nfs/file nfs4_setfacl -a A::user2:R /nfs/file nfs4_setfacl -a A::user57:R /nfs/file nfs4_setfacl -a A::user69:R /nfs/file nfs4_setfacl -a A::user167:R /nfs/file nfs4_setfacl -a A::user155:R /nfs/file nfs4_setfacl -a A::user143:R /nfs/file nfs4_setfacl -a A::user76:R /nfs/file nfs4_setfacl -a A::user131:R /nfs/file nfs4_setfacl -a A::user88:R /nfs/file nfs4_setfacl -a A::user20:R /nfs/file nfs4_setfacl -a A::user32:R /nfs/file nfs4_setfacl -a A::user118:R /nfs/file nfs4_setfacl -a A::user132:R /nfs/file nfs4_setfacl -a A::user120:R /nfs/file nfs4_setfacl -a A::user119:R /nfs/file nfs4_setfacl -a A::user133:R /nfs/file nfs4_setfacl -a A::user75:R /nfs/file nfs4_setfacl -a A::user5:R /nfs/file nfs4_setfacl -a A::user87:R /nfs/file nfs4_setfacl -a A::user121:R /nfs/file nfs4_setfacl -a A::user99:R /nfs/file nfs4_setfacl -a A::user31:R /nfs/file nfs4_setfacl -a A::user108:R /nfs/file nfs4_setfacl -a A::user28:R /nfs/file nfs4_setfacl -a A::user122:R /nfs/file nfs4_setfacl -a A::user110:R /nfs/file nfs4_setfacl -a A::user109:R /nfs/file nfs4_setfacl -a A::user123:R /nfs/file nfs4_setfacl -a A::user74:R /nfs/file nfs4_setfacl -a A::user111:R /nfs/file nfs4_setfacl -a A::user86:R /nfs/file nfs4_setfacl -a A::user98:R /nfs/file nfs4_setfacl -a A::user30:R /nfs/file nfs4_setfacl -a A::user27:R /nfs/file nfs4_setfacl -a A::user112:R /nfs/file nfs4_setfacl -a A::user39:R /nfs/file nfs4_setfacl -a A::user100:R /nfs/file nfs4_setfacl -a A::user73:R /nfs/file nfs4_setfacl -a A::user101:R /nfs/file nfs4_setfacl -a A::user85:R /nfs/file nfs4_setfacl -a A::user97:R /nfs/file nfs4_setfacl -a A::user191:R /nfs/file nfs4_setfacl -a A::user26:R /nfs/file nfs4_setfacl -a A::user102:R /nfs/file nfs4_setfacl -a A::user38:R /nfs/file nfs4_setfacl -a A::user192:R /nfs/file nfs4_setfacl -a A::user60:R /nfs/file nfs4_setfacl -a A::user72:R /nfs/file nfs4_setfacl -a A::user179:R /nfs/file nfs4_setfacl -a A::user84:R /nfs/file nfs4_setfacl -a A::user193:R /nfs/file nfs4_setfacl -a A::user96:R /nfs/file nfs4_setfacl -a A::user181:R /nfs/file nfs4_setfacl -a A::user25:R /nfs/file nfs4_setfacl -a A::user37:R /nfs/file nfs4_setfacl -a A::user194:R /nfs/file nfs4_setfacl -a A::user49:R /nfs/file nfs4_setfacl -a A::user9:R /nfs/file nfs4_setfacl -a A::user170:R /nfs/file nfs4_setfacl -a A::user182:R /nfs/file nfs4_setfacl -a A::user200:R /nfs/file nfs4_setfacl -a A::user71:R /nfs/file nfs4_setfacl -a A::user169:R /nfs/file nfs4_setfacl -a A::user83:R /nfs/file nfs4_setfacl -a A::user183:R /nfs/file nfs4_setfacl -a A::user95:R /nfs/file nfs4_setfacl -a A::user171:R /nfs/file nfs4_setfacl -a A::user24:R /nfs/file nfs4_setfacl -a A::user36:R /nfs/file nfs4_setfacl -a A::user184:R /nfs/file nfs4_setfacl -a A::user48:R /nfs/file nfs4_setfacl -a A::user172:R /nfs/file nfs4_setfacl -a A::user160:R /nfs/file nfs4_setfacl -a A::user70:R /nfs/file nfs4_setfacl -a A::user159:R /nfs/file nfs4_setfacl -a A::user82:R /nfs/file nfs4_setfacl -a A::user173:R /nfs/file nfs4_setfacl -a A::user94:R /nfs/file nfs4_setfacl -a A::user161:R /nfs/file nfs4_setfacl -a A::user23:R /nfs/file nfs4_setfacl -a A::user35:R /nfs/file nfs4_setfacl -a A::user174:R /nfs/file nfs4_setfacl -a A::user47:R /nfs/file nfs4_setfacl -a A::user162:R /nfs/file nfs4_setfacl -a A::user150:R /nfs/file nfs4_setfacl -a A::user149:R /nfs/file nfs4_setfacl -a A::user81:R /nfs/file nfs4_setfacl -a A::user163:R /nfs/file nfs4_setfacl -a A::user151:R /nfs/file nfs4_setfacl -a A::user10:R /nfs/file nfs4_setfacl -a A::user22:R /nfs/file nfs4_setfacl -a A::user34:R /nfs/file nfs4_setfacl -a A::user138:R /nfs/file nfs4_setfacl -a A::user46:R /nfs/file nfs4_setfacl -a A::user152:R /nfs/file nfs4_setfacl -a A::user164:R /nfs/file nfs4_setfacl -a A::user140:R /nfs/file nfs4_setfacl -a A::user139:R /nfs/file nfs4_setfacl -a A::user80:R /nfs/file nfs4_setfacl -a A::user153:R /nfs/file nfs4_setfacl -a A::user4:R /nfs/file nfs4_setfacl -a A::user77:R /nfs/file nfs4_setfacl -a A::user89:R /nfs/file nfs4_setfacl -a A::user141:R /nfs/file nfs4_setfacl -a A::user21:R /nfs/file nfs4_setfacl -a A::user33:R /nfs/file nfs4_setfacl -a A::user128:R /nfs/file nfs4_setfacl -a A::user45:R /nfs/file nfs4_setfacl -a A::user142:R /nfs/file nfs4_setfacl -a A::user130:R /nfs/file nfs4_setfacl -a A::user129:R /nfs/file nfs4-acl-tools version is 0.3.3-15.el7.x86_64
If the nfs v4 id domain is nfsv4_tect.hslab.wwtech; nis domain is hslab.wwtech, I got the below errors on rhel7.2 # ./nfs4_setfacl.sh nfs4_setfacl -a A::user13.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user91.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user168.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user156.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user144.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user44.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user56.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user68.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user157.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user145.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user12.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user90.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user158.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user146.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user134.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user43.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user55.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user3.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user67.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user147.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user79.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user135.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user11.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user148.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user136.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user124.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user42.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user54.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user66.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user137.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user78.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user125.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user113.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user19.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user6.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user126.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user114.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user41.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user53.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user65.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user127.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user115.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user103.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user18.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user116.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user104.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user40.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user52.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user64.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user117.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user105.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user195.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user17.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user29.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user7.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user106.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user196.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user51.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user63.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user107.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user197.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user185.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user16.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user198.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user186.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user50.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user1.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user62.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user59.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user199.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user187.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user175.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user15.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user93.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user8.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user188.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user176.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user190.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user61.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user58.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user189.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user177.wwtech:R /nfs/feitest.txt nfs4_setfacl -a A::user165.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user14.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user92.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user178.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user166.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user154.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user180.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user2.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user57.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user69.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user167.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user155.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user143.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user76.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user131.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user88.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user20.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user32.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user118.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user132.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user120.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user119.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user133.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user75.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user5.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user87.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user121.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user99.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user31.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user108.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user28.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user122.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user110.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user109.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user123.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user74.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user111.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user86.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user98.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user30.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user27.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user112.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user39.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user100.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user73.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user101.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user85.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user97.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user191.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user26.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user102.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user38.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user192.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user60.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user72.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user179.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user84.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user193.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user96.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user181.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user25.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user37.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user194.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user49.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user9.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user170.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user182.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user200.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user71.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user169.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user83.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user183.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user95.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user171.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user24.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user36.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user184.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user48.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user172.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user160.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user70.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user159.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user82.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user173.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user94.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user161.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user23.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user35.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user174.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user47.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user162.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user150.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user149.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user81.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user163.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user151.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user10.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user22.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user34.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user138.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user46.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user152.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user164.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user140.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user139.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user80.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user153.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user4.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user77.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user89.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user141.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user21.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user33.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user128.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user45.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user142.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user130.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. nfs4_setfacl -a A::user129.wwtech:R /nfs/feitest.txt Failed getxattr operation: Numerical result out of range Failed to instantiate ACL. ypcat passwd | grep user | cut -f1 -d: | wc -l 200 # cat nfs4_setfacl.sh #!/bin/sh for i in `ypcat passwd | grep user | cut -f1 -d: ` do echo " nfs4_setfacl -a A::$i.wwtech:R /nfs/feitest.txt " #sleep 1s nfs4_setfacl -a A::$i.wwtech:R /nfs/feitest.txt #sleep 1s #nfs4_getfacl /mnt/nfs/test done echo "ypcat passwd | grep user | cut -f1 -d: | wc -l" echo "`ypcat passwd | grep user | cut -f1 -d: | wc -l`" # workaround # nfs4_setfacl -s A::root:RWX /mnt/nfs/test
Customer want to know any update about this bug ?
seems similar with Bug 877426 (close with WONTFIX)
Agreed that this appears to be hitting the same server ACL size limits as bug 877426. The fix was a rewrite of the server's xdr code which is not a practical backport to RHEL6. Also, the remaining problem seen on RHEL7 (the ERANGE return seen in comment 4) is likely the client-side problem that we're working on in bug 869942. *** This bug has been marked as a duplicate of bug 877426 ***