* [PATCH v2 1/1] NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
@ 2021-05-19 21:15 Dai Ngo
2021-05-28 17:30 ` dai.ngo
0 siblings, 1 reply; 4+ messages in thread
From: Dai Ngo @ 2021-05-19 21:15 UTC (permalink / raw)
To: trondmy; +Cc: linux-nfs
Currently if __nfs4_proc_set_acl fails with NFS4ERR_BADOWNER it
re-enables the idmapper by clearing NFS_CAP_UIDGID_NOMAP before
retrying again. The NFS_CAP_UIDGID_NOMAP remains cleared even if
the retry fails. This causes problem for subsequent setattr
requests for v4 server that does not have idmapping configured.
This patch modifies nfs4_proc_set_acl to detect NFS4ERR_BADOWNER
and NFS4ERR_BADNAME and skips the retry, since the kernel isn't
involved in encoding the ACEs, and return -EINVAL.
Steps to reproduce the problem:
# mount -o vers=4.1,sec=sys server:/export/test /tmp/mnt
# touch /tmp/mnt/file1
# chown 99 /tmp/mnt/file1
# nfs4_setfacl -a A::unknown.user@xyz.com:wrtncy /tmp/mnt/file1
Failed setxattr operation: Invalid argument
# chown 99 /tmp/mnt/file1
chown: changing ownership of ‘/tmp/mnt/file1’: Invalid argument
# umount /tmp/mnt
# mount -o vers=4.1,sec=sys server:/export/test /tmp/mnt
# chown 99 /tmp/mnt/file1
#
v2: detect NFS4ERR_BADOWNER and NFS4ERR_BADNAME and skip retry
in nfs4_proc_set_acl.
Signed-off-by: Dai Ngo <dai.ngo@oracle.com>
---
fs/nfs/nfs4proc.c | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/fs/nfs/nfs4proc.c b/fs/nfs/nfs4proc.c
index 87d04f2c9385..4e052c7f0614 100644
--- a/fs/nfs/nfs4proc.c
+++ b/fs/nfs/nfs4proc.c
@@ -5968,6 +5968,14 @@ static int nfs4_proc_set_acl(struct inode *inode, const void *buf, size_t buflen
do {
err = __nfs4_proc_set_acl(inode, buf, buflen);
trace_nfs4_set_acl(inode, err);
+ if (err == -NFS4ERR_BADOWNER || err == -NFS4ERR_BADNAME) {
+ /*
+ * no need to retry since the kernel
+ * isn't involved in encoding the ACEs.
+ */
+ err = -EINVAL;
+ break;
+ }
err = nfs4_handle_exception(NFS_SERVER(inode), err,
&exception);
} while (exception.retry);
--
2.9.5
^ permalink raw reply related [flat|nested] 4+ messages in thread
* Re: [PATCH v2 1/1] NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
2021-05-19 21:15 [PATCH v2 1/1] NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error Dai Ngo
@ 2021-05-28 17:30 ` dai.ngo
2021-05-28 17:41 ` Trond Myklebust
0 siblings, 1 reply; 4+ messages in thread
From: dai.ngo @ 2021-05-28 17:30 UTC (permalink / raw)
To: trondmy; +Cc: linux-nfs
Hi Trond,
Just a reminder that this patch is ready for your review.
Thanks,
-Dai
On 5/19/21 2:15 PM, Dai Ngo wrote:
> Currently if __nfs4_proc_set_acl fails with NFS4ERR_BADOWNER it
> re-enables the idmapper by clearing NFS_CAP_UIDGID_NOMAP before
> retrying again. The NFS_CAP_UIDGID_NOMAP remains cleared even if
> the retry fails. This causes problem for subsequent setattr
> requests for v4 server that does not have idmapping configured.
>
> This patch modifies nfs4_proc_set_acl to detect NFS4ERR_BADOWNER
> and NFS4ERR_BADNAME and skips the retry, since the kernel isn't
> involved in encoding the ACEs, and return -EINVAL.
>
> Steps to reproduce the problem:
>
> # mount -o vers=4.1,sec=sys server:/export/test /tmp/mnt
> # touch /tmp/mnt/file1
> # chown 99 /tmp/mnt/file1
> # nfs4_setfacl -a A::unknown.user@xyz.com:wrtncy /tmp/mnt/file1
> Failed setxattr operation: Invalid argument
> # chown 99 /tmp/mnt/file1
> chown: changing ownership of ‘/tmp/mnt/file1’: Invalid argument
> # umount /tmp/mnt
> # mount -o vers=4.1,sec=sys server:/export/test /tmp/mnt
> # chown 99 /tmp/mnt/file1
> #
>
> v2: detect NFS4ERR_BADOWNER and NFS4ERR_BADNAME and skip retry
> in nfs4_proc_set_acl.
> Signed-off-by: Dai Ngo <dai.ngo@oracle.com>
> ---
> fs/nfs/nfs4proc.c | 8 ++++++++
> 1 file changed, 8 insertions(+)
>
> diff --git a/fs/nfs/nfs4proc.c b/fs/nfs/nfs4proc.c
> index 87d04f2c9385..4e052c7f0614 100644
> --- a/fs/nfs/nfs4proc.c
> +++ b/fs/nfs/nfs4proc.c
> @@ -5968,6 +5968,14 @@ static int nfs4_proc_set_acl(struct inode *inode, const void *buf, size_t buflen
> do {
> err = __nfs4_proc_set_acl(inode, buf, buflen);
> trace_nfs4_set_acl(inode, err);
> + if (err == -NFS4ERR_BADOWNER || err == -NFS4ERR_BADNAME) {
> + /*
> + * no need to retry since the kernel
> + * isn't involved in encoding the ACEs.
> + */
> + err = -EINVAL;
> + break;
> + }
> err = nfs4_handle_exception(NFS_SERVER(inode), err,
> &exception);
> } while (exception.retry);
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH v2 1/1] NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
2021-05-28 17:30 ` dai.ngo
@ 2021-05-28 17:41 ` Trond Myklebust
2021-05-28 17:44 ` dai.ngo
0 siblings, 1 reply; 4+ messages in thread
From: Trond Myklebust @ 2021-05-28 17:41 UTC (permalink / raw)
To: dai.ngo; +Cc: linux-nfs
On Fri, 2021-05-28 at 10:30 -0700, dai.ngo@oracle.com wrote:
> Hi Trond,
>
> Just a reminder that this patch is ready for your review.
Sorry. I missed that update for some reason.
>
> Thanks,
> -Dai
>
> On 5/19/21 2:15 PM, Dai Ngo wrote:
> > Currently if __nfs4_proc_set_acl fails with NFS4ERR_BADOWNER it
> > re-enables the idmapper by clearing NFS_CAP_UIDGID_NOMAP before
> > retrying again. The NFS_CAP_UIDGID_NOMAP remains cleared even if
> > the retry fails. This causes problem for subsequent setattr
> > requests for v4 server that does not have idmapping configured.
> >
> > This patch modifies nfs4_proc_set_acl to detect NFS4ERR_BADOWNER
> > and NFS4ERR_BADNAME and skips the retry, since the kernel isn't
> > involved in encoding the ACEs, and return -EINVAL.
> >
> > Steps to reproduce the problem:
> >
> > # mount -o vers=4.1,sec=sys server:/export/test /tmp/mnt
> > # touch /tmp/mnt/file1
> > # chown 99 /tmp/mnt/file1
> > # nfs4_setfacl -a A::unknown.user@xyz.com:wrtncy /tmp/mnt/file1
> > Failed setxattr operation: Invalid argument
> > # chown 99 /tmp/mnt/file1
> > chown: changing ownership of ‘/tmp/mnt/file1’: Invalid argument
> > # umount /tmp/mnt
> > # mount -o vers=4.1,sec=sys server:/export/test /tmp/mnt
> > # chown 99 /tmp/mnt/file1
> > #
> >
> > v2: detect NFS4ERR_BADOWNER and NFS4ERR_BADNAME and skip retry
> > in nfs4_proc_set_acl.
> > Signed-off-by: Dai Ngo <dai.ngo@oracle.com>
> > ---
> > fs/nfs/nfs4proc.c | 8 ++++++++
> > 1 file changed, 8 insertions(+)
> >
> > diff --git a/fs/nfs/nfs4proc.c b/fs/nfs/nfs4proc.c
> > index 87d04f2c9385..4e052c7f0614 100644
> > --- a/fs/nfs/nfs4proc.c
> > +++ b/fs/nfs/nfs4proc.c
> > @@ -5968,6 +5968,14 @@ static int nfs4_proc_set_acl(struct inode
> > *inode, const void *buf, size_t buflen
> > do {
> > err = __nfs4_proc_set_acl(inode, buf, buflen);
> > trace_nfs4_set_acl(inode, err);
> > + if (err == -NFS4ERR_BADOWNER || err == -
> > NFS4ERR_BADNAME) {
> > + /*
> > + * no need to retry since the kernel
> > + * isn't involved in encoding the ACEs.
> > + */
> > + err = -EINVAL;
> > + break;
> > + }
> > err = nfs4_handle_exception(NFS_SERVER(inode), err,
> > &exception);
> > } while (exception.retry);
Yes, this looks OK.
--
Trond Myklebust
Linux NFS client maintainer, Hammerspace
trond.myklebust@hammerspace.com
^ permalink raw reply [flat|nested] 4+ messages in thread
* Re: [PATCH v2 1/1] NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error.
2021-05-28 17:41 ` Trond Myklebust
@ 2021-05-28 17:44 ` dai.ngo
0 siblings, 0 replies; 4+ messages in thread
From: dai.ngo @ 2021-05-28 17:44 UTC (permalink / raw)
To: Trond Myklebust; +Cc: linux-nfs
On 5/28/21 10:41 AM, Trond Myklebust wrote:
> On Fri, 2021-05-28 at 10:30 -0700, dai.ngo@oracle.com wrote:
>> Hi Trond,
>>
>> Just a reminder that this patch is ready for your review.
> Sorry. I missed that update for some reason.
it's ok. It can wait for the next pull.
Thanks,
-Dai
>
>> Thanks,
>> -Dai
>>
>> On 5/19/21 2:15 PM, Dai Ngo wrote:
>>> Currently if __nfs4_proc_set_acl fails with NFS4ERR_BADOWNER it
>>> re-enables the idmapper by clearing NFS_CAP_UIDGID_NOMAP before
>>> retrying again. The NFS_CAP_UIDGID_NOMAP remains cleared even if
>>> the retry fails. This causes problem for subsequent setattr
>>> requests for v4 server that does not have idmapping configured.
>>>
>>> This patch modifies nfs4_proc_set_acl to detect NFS4ERR_BADOWNER
>>> and NFS4ERR_BADNAME and skips the retry, since the kernel isn't
>>> involved in encoding the ACEs, and return -EINVAL.
>>>
>>> Steps to reproduce the problem:
>>>
>>> # mount -o vers=4.1,sec=sys server:/export/test /tmp/mnt
>>> # touch /tmp/mnt/file1
>>> # chown 99 /tmp/mnt/file1
>>> # nfs4_setfacl -a A::unknown.user@xyz.com:wrtncy /tmp/mnt/file1
>>> Failed setxattr operation: Invalid argument
>>> # chown 99 /tmp/mnt/file1
>>> chown: changing ownership of ‘/tmp/mnt/file1’: Invalid argument
>>> # umount /tmp/mnt
>>> # mount -o vers=4.1,sec=sys server:/export/test /tmp/mnt
>>> # chown 99 /tmp/mnt/file1
>>> #
>>>
>>> v2: detect NFS4ERR_BADOWNER and NFS4ERR_BADNAME and skip retry
>>> in nfs4_proc_set_acl.
>>> Signed-off-by: Dai Ngo <dai.ngo@oracle.com>
>>> ---
>>> fs/nfs/nfs4proc.c | 8 ++++++++
>>> 1 file changed, 8 insertions(+)
>>>
>>> diff --git a/fs/nfs/nfs4proc.c b/fs/nfs/nfs4proc.c
>>> index 87d04f2c9385..4e052c7f0614 100644
>>> --- a/fs/nfs/nfs4proc.c
>>> +++ b/fs/nfs/nfs4proc.c
>>> @@ -5968,6 +5968,14 @@ static int nfs4_proc_set_acl(struct inode
>>> *inode, const void *buf, size_t buflen
>>> do {
>>> err = __nfs4_proc_set_acl(inode, buf, buflen);
>>> trace_nfs4_set_acl(inode, err);
>>> + if (err == -NFS4ERR_BADOWNER || err == -
>>> NFS4ERR_BADNAME) {
>>> + /*
>>> + * no need to retry since the kernel
>>> + * isn't involved in encoding the ACEs.
>>> + */
>>> + err = -EINVAL;
>>> + break;
>>> + }
>>> err = nfs4_handle_exception(NFS_SERVER(inode), err,
>>> &exception);
>>> } while (exception.retry);
> Yes, this looks OK.
>
^ permalink raw reply [flat|nested] 4+ messages in thread
end of thread, other threads:[~2021-05-28 17:44 UTC | newest]
Thread overview: 4+ messages (download: mbox.gz / follow: Atom feed)
-- links below jump to the message on this page --
2021-05-19 21:15 [PATCH v2 1/1] NFSv4: nfs4_proc_set_acl needs to restore NFS_CAP_UIDGID_NOMAP on error Dai Ngo
2021-05-28 17:30 ` dai.ngo
2021-05-28 17:41 ` Trond Myklebust
2021-05-28 17:44 ` dai.ngo
This is an external index of several public inboxes,
see mirroring instructions on how to clone and mirror
all data and code used by this external index.