ABE share property for NFS and SMB [PSARC/2009/375 Self Review]
Darren J Moffat
Darren.Moffat at sun.com
Wed Jul 1 04:54:40 PDT 2009
Alan.M.Wright wrote:
>>> This case proposes a new share property to support Access Based
>>> Enumeration (ABE) on NFS and SMB shares.
>>>
>>> The NFS and SMB services will consume the interface defined by
>>> PSARC/2009/246, which added ABE support to ZFS. The ABE share
>>> property will provide administrators with the ability to enable
>>> ACL based directory content filtering on NFS and SMB shares.
>>> As described in PSARC/2009/246, with ABE enabled, entries to
>>> which the requesting user has no access will be omitted from
>>> the dirent data returned by the file system.
>>>
>>> Additional information is available in the following RFEs:
>>> 6802734 Support for Access Based Enumeration
>>> 6802736 SMB share support for Access Based Enumeration
>>> The proposed property name and values are:
>>>
>>> abe=boolean
>>
>> IMO that isn't a very descriptive name for end admins isn't there
>> anything better ? If there isn't then fair-enough.
>
> It's generally known as ABE.
Okay.
>> Is this a ZPL property or a normal one ?
>
> Neither.
>
>> Why is this a separate per dataset property rather than an option for
>> sharenfs or sharesmb ?
>
> It's a regular per-share property that can be set via sharemgr or
> via sharenfs/sharesmb.
Okay, great I got confused in my reading of the case and assumed where
it said property it mean't ZFS property.
I agree this is suitable for Self Review as specified.
--
Darren J Moffat
More information about the opensolaris-arc
mailing list