ACL support in slackware for Samba box

arobinson74 · 04-07-2005, 10:50 AM

I am building a network server that will also act as a Windows File server and PDC. I would like to support security on the file server for windows clients, hence I need ACL support. Right now I have ReiserFS on my /dev/md0 array that I plan on using for the file share.

Mount does not recognize the "acl" option for ReiserFS. I also mounted a XFS partition to test with and the setfacl call:

setfacl -m g:mygroup:rwx somefile

Fails with an "Operation not supported" error.

I am running the Sata 2.4.29 kernel on my server box and the Scsi 2.4.29 kernel on my testing box (VMWare PC).

I tried to install the 2.6 generic kernel on the VMPC but as I thought it might, it failed when trying to mount /dev/sda1 for the root drive in lilo (the vmlinuz-generic-2.6.10 must not have SCSI support enabled).

In the kernel source for 2.4.29 I found XFS modules, but nothing about ACL. Grep'ing the .config file for the kernel, I also found no ACL options.

Before spending hours trying different kernels and hard drive settings and such, was wondering if someone has enabled ACL support for reiserfs or just using XFS in slackware 10.1 (or older)?

I found a similar question at:
http://www.linuxquestions.org/questi...&highlight=acl

But this did not as about XFS support or specify kernels and it did not get any replies.

tangle · 04-07-2005, 01:14 PM

To use ACL you need to use 2.6.8 or newer (i think it is 8) kernel. You need to enable it in the kernel too or have it compiled as a module and then load the module.

I am not sure what is compiled in the generic kernel by default. But you might want to try to compile the latest stable kernel from source. An excellent how to is here, http://www.linuxquestions.org/questi...threadid=49035 .

I have compiled kernels a few time. When it fails to load of something like that. It has always been my fault. Not saying that you messed up or anything like that.

arobinson74 · 04-07-2005, 03:16 PM

Installed the generic, modules and source kernel packes from slack 10.1.

Followed the initrd instructions in the readme.

Ran "make xconfig" on the kernel 2.6.10 source.

Turned some things off.
Turned on extended file attributes with ACL for reiserFS

Ran "make"
Ran "make modules_install"
Copied "System.map" from kernel source root dir to "/boot/System.map-custom-2.6.10"
Copied "arch/i386/boot/bzImage" to "/boot/vmlinuz-custom-2.6.10"
"vim /etc/lilo.conf"
Added:
image = /boot/vmlinuz-custom-2.6.10
root = /dev/sda1
label = Linux2.6Cust
read-only

"lilo"
"shutdown -r now"

Choose the new kernel...

Got past the SCSI support, was loading NET, then "ACPI wakeup devices:"
Then got:

Code:

ACPI: (supports S0 S5)
Kernel panic - not syncing: Vfs: Unable to mount root fs on unknown-block(8,1)

arobinson74 · 04-07-2005, 03:21 PM

If I try my old 2.4.29 kernel (which is still in my lilo configuration), it dies the same way:

Code:

APCI wakeup devices:
 USB
ACPI: (supports S0 S5)
VFS: Cannot open root device "801" or unkown-block(8,1)
Please append a correct "root=" boot option
Kernel panic - not syncing: VFS: Unable to mount root fs on unknown-block(8,1)

mdarby · 04-07-2005, 03:41 PM

When compiling a new kernel, make sure that your root filesystem is compiled in (not selected as a module).

Also ensure that you compile in Vesa Framebuffer, or your screen will show no text on boot

arobinson74 · 04-08-2005, 10:33 AM

Had to compile the buslogic driver into the kernel. Also, put the reiserfs into the kernel instead of a module. This caused a difference for when updating the int rd.

Documented from README.initrd:
mkinitrd -c -k 2.6.10 -m reiserfs

With reiserfs not as a module, had to use:
mkinitrd -c -k 2.6.10

This make me wonder if I could have used:
mkinitrd -c -k 2.6.10 -m reiserfs,buslogic

This should have theoretically loaded the reiserfs and buslogic modules before mounting the hard drive.

Nobber · 04-08-2005, 10:48 AM

Have you enabled "ReiserFS extended attributes" in the kernel config? I think you need that in order to use ACL.

See http://acl.bestbits.at/

arobinson74 · 04-08-2005, 11:20 AM

Whoops, forgot to say it is working now.

For those that are following or have similar problems:

My setup for these steps:
Slackware 10.1 ISOs #1 and 2 extracted to /var/install (so slackware is /var/install/slackware)
[list=1][*]cd /var/install/testing/packages/linux-2.6.10[*]installpkg kernel-generic-2.6.10.tgz[*]installpkg kernel-modules-2.6.10.tgz[*]installpkg kernel-source-2.6.10-noarch-1.tgz[*]cd /usr/src/linux-2.6.10[*]make config (or "make xconfig", or "make menuconfig", etc.)[*]scsi device? then mark your scsi driver to be included in the kernel[*]sata device? then mark your sata driver to be include in the kernel[*]mark xfs and/or reiserfs as included instead of modules[*]mark reiserfs extended attribute support for access control lists as included[*]make [*]wait...[*]wait some more...[*]make modules_install[*]waiting again...[*]cp System.map /boot/System.map-custom-2.6.10[*]cp arch/i386/boot/bzImage /boot/vmlinuz-custom-2.6.10[*]cd /boot[*]mkintrd -c -k 2.6.10 (see my above note on using -m possibly if you kept the above drivers as modules)[*]vim /etc/lilo.conf[*]add at the bottom (customize for your own use):

Code:

image = /boot/vmlinuz-custom-2.6.10
  root = /dev/sda1
  label = Linux2.6Cust
  read-only

[*]lilo[*]reboot[*]XFS will have built in support for acl[*]For your reiser fs, mount something like this:

Code:

mount -t reiserfs -o defaults,acl,user_xattr /dev/sdc1 /mnt/sdc1

[*]setfacl -m u:testuser:rw testfile[/list=1]

That was all. Working now. Thanks all for the feedback.

YourPadre · 04-27-2005, 10:27 AM

i not have setfacl in my slack10.1, where i can download?

arobinson74 · 04-27-2005, 12:48 PM

setfacl is part of the slackware distribution

You need to have the "slackware/a/xfsprogs-2.6.13-i486.tgz" package installed