A year or so ago, I was successful in getting NFSv4 to work between a R100 (DOT 6.4.5) using CIFS and NFS and a Solaris 8 client. I don't recall many of the details now, except that it was less than straight forward. And I do recall that I had difficulty repeating my success. Trouble shooting the layout included sniffing the network for clues, but even then it wasn't clear what was missing. Since we were using AD for authentication, one of the requirements was that the kerberos realm on the Solaris client had to be the same as our AD domain. My lack of AD expertise was likely a large part of the reason for my troubles. I think it was tricky to get the initial key set up on the AD server, and then propogated to the filer.
So, I can confirm that it can be done, but am unfortunately short on nitty-gritty too. I'm hoping to transition to DOT 7.x soon. I may give it another go, against Solaris 10, and MacOS X, and RedHat clients. The way we share filesystems to all types of clients, it doesn't make sense to bother with kerberos at all, unless we can make it work against all of our clients, and for some reason, MacOS X support for NFSv4 seems to come and go.
Re:
Subject: Re: Mixed Mode To: tmacmd@gmail.com (Tim McCarthy) Date: Thu, 16 Mar 2006 16:50:10 +0000 (GMT) Cc: toasters@mathworks.com From: Chris Thompson cet1@cus.cam.ac.uk
tmacmd@gmail.com (Tim McCarthy) writes:
Lest we all forget.....NFSv4?
Solaris 10 has it, Mnay version of Linux has it.
Granted I have done very limited testing, but I am able to set and control ACLs using getfacl and setfacl under solaris and linux.
If this with a qtree/volume in ntfs mode? Or do files in unix mode qtrees/volumes acquire ACLs if you use NFSv4 to them?
What is nice is that the ACL is obeyed by nfsv3 clients as well. I bet a lucky side-effect.
This "common" ACL support sure looks like it will beat mixed-mode.
I would certainly like to think that NFSv4 will solve everyone's problems. :-)
If there are toaster-readers who have practical experience with using NFSv4 to filers, with or without CIFS access to the same files, it would be great if they could describe that to the rest of us. When we've had people from NetApp come and talk to us, they've often said that yes, interworking between NFSv4 and CIFS is fine, but turn out to be short on nitty-gritty details when cross-examined.
-- Chris Thompson Email: cet1@cam.ac.uk