<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=Windows-1252">
<meta name="Generator" content="Microsoft Exchange Server">
<!-- converted from text --><style><!-- .EmailQuote { margin-left: 1pt; padding-left: 4pt; border-left: #800000 2px solid; } --></style>
</head>
<body>
<div><br>
Yes, the other choices to having the MDS able to do auth itself are strictly trusting all UIDS/GIDS it is sent or rejecting those it can't auth itself. The first is semi-acceptable in some setups... but really fixing it is probably better.<br>
<br>
<hr tabindex="-1" style="display:inline-block; width:98%">
<div id="x_divRplyFwdMsg" dir="ltr"><font face="Calibri, sans-serif" color="#000000" style="font-size:11pt"><b>From:</b> Phill Harvey-Smith <p.harvey-smith@warwick.ac.uk><br>
<b>Sent:</b> Tuesday, December 13, 2016 3:46:30 AM<br>
<b>To:</b> Patrick Farrell; Carlson, Timothy S; lustre-discuss@lists.lustre.org<br>
<b>Subject:</b> Re: [lustre-discuss] problems accessing files as non-root user.</font>
<div> </div>
</div>
</div>
<font size="2"><span style="font-size:10pt;">
<div class="PlainText">On 12/12/2016 17:27, Patrick Farrell wrote:<br>
> Perhaps more expansively:<br>
> Is the new MDS configured to be able to authenticate these users? Using<br>
> /etc/passwd synchronization to do network auth is nasty. It's just<br>
> asking for weird troubles if you don't get it exactly right. LDAP or<br>
> similar is the way to go.<br>
<br>
This time replying to group as well :)<br>
<br>
That could be it, the cluster has a nis server for user management, so I <br>
guess I need to add the nis client to the MDS. I'd not done this as I <br>
didn't think it would be needed and would prevent the normal users from <br>
logging in directly to the MDS. But thinking about the way Lustre <br>
operates, I can see why it would be needed.<br>
<br>
Having installed nis on the MDS i can confirm that this does indeed seem <br>
to have fixed the permissions problem.<br>
<br>
Thanks for the speedy replies all.<br>
<br>
Cheers.<br>
<br>
Phill.<br>
<br>
<br>
</div>
</span></font>
</body>
</html>