ZFS Setting the User Permission/ACL using: setfacl (-a) - shows error for NFS4

sny

sny

FreeBSD 12.2 - zfs dataset WDRED/Media
While setting the User Permission/ACL using: setfacl
This works:
doas setfacl -R -m u:plex:rx::allow /WDRED_DATA/Media
But, this does not work: The man pages recommends to use -a for NFS4 Shares:
doas setfacl -R -a u:plex:rx::allow /WDRED_DATA/Media
Error:
setfacl: u:plex:rx::allow: invalid entry number

What am I missing....?
 
sny said:
This works:
doas setfacl -R -m u:plex:rx::allow /WDRED_DATA/Media
But, this does not work: The man pages recommends to use -a for NFS4 Shares:
doas setfacl -R -a u:plex:rx::allow /WDRED_DATA/Media
Error:
setfacl: u:plex:rx::allow: invalid entry number
Click to expand...
Reading into setfacl(1), the -a option says

Rich (BB code): 
-a    position entries
         Modify the    ACL on the specified files by inserting    new ACL    en-
         tries specified in    entries, starting at position position,    count-
         ing from zero.  This option is only applicable to NFSv4 ACLs.
The -a option should be used as follows in the command:

Code: 
doas setfacl -R -a 0 u:plex:rx::allow /WDRED_DATA/Media
               ~~~^^^~~~
I haven't figured out what influence exactly the position has on ACL's:

getfacl /WDRED_DATA/Media # before setfacl
Code: 
# file: /WDRED_DATA/Media
# owner: root
# group: wheel
            owner@:rwxp--aARWcCos:-------:allow
            group@:r-x---a-R-c--s:-------:allow
         everyone@:r-x---a-R-c--s:-------:allow
getfacl /WDRED_DATA/Media # after setfacl -R -a 0 ...
Code: 
# file: /WDRED_DATA/Media
# owner: root
# group: wheel
         user:plex:r-x-----------:-------:allow
            owner@:rwxp--aARWcCos:-------:allow
            group@:r-x---a-R-c--s:-------:allow
         everyone@:r-x---a-R-c--s:-------:allow
getfacl /WDRED_DATA/Media # after setfacl -b ..., setfacl -R -a 1 ...
Code: 
# file: /WDRED_DATA/Media
# owner: root
# group: wheel
            owner@:rwxp--aARWcCos:-------:allow
         user:plex:r-x-----------:-------:allow
            group@:r-x---a-R-c--s:-------:allow
         everyone@:r-x---a-R-c--s:-------:allow
 
You must log in or register to reply here.
Back
Top