Strange permission (and presentation) issues.

[jvhaarst]

We have the following situation:
We have installed nfsrods on a VM, placing the jar and configs in /opt/nfsrods.
server.json looks like this:

{
    "nfs_server": {
        "port": 2049,
        "irods_mount_point": "/HPC",
        "user_information_refresh_time_in_milliseconds": 3600000,
        "file_information_refresh_time_in_milliseconds": 1000,
        "user_access_refresh_time_in_milliseconds": 1000,
        "object_type_refresh_time_in_milliseconds": 300000,
        "user_permissions_refresh_time_in_milliseconds": 300000,
        "user_type_refresh_time_in_milliseconds": 300000,
        "list_operation_query_results_refresh_time_in_milliseconds": 30000,
        "allow_overwrite_of_existing_files": true,
        "using_oracle_database": false
    },

    "irods_client": {
        "zone": "HPC",
        "host": "archive200.internal.anunna.wur.nl",
        "port": 1247,
        "default_resource": "hot_1",
        "ssl_negotiation_policy": "CS_NEG_DONT_CARE",
        "connection_timeout_in_seconds": 600,
        "proxy_admin_account": {
            "username": "login",
            "password": "pass"
        }
    }
}

Mounting is successful:

root@app-test:~# mkdir /nfsrods ; mount -o sec=sys -t nfs app-nfsrods0.internal.anunna.wur.nl:/ /nfsrods/ -vvv
mount.nfs: timeout set for Fri Nov 28 13:59:32 2025
mount.nfs: trying text-based options 'sec=sys,vers=4.2,addr=192.168.0.12,clientaddr=192.168.0.11'
mount.nfs: mount(2): Protocol not supported
mount.nfs: trying text-based options 'sec=sys,vers=4,minorversion=1,addr=192.168.0.12,clientaddr=192.168.0.11'

What we see is that folders are showing up duplicated and that the permissions are off:

haars001@app-test:/nfsrods/GUESTS$ /bin/ls -latrh | grep -c prins089
28
haars001@app-test:/nfsrods/GUESTS$ /bin/ls -latrhd prins089
drwx------+ 1 haars001 nogroup 0 Nov 24 16:30 prins089
haars001@app-test:/nfsrods/GUESTS$ nfs4_getfacl prins089
# file: prins089
A::anunna_admins@:rwado
A::prins089@:rwado
A::root_irods@:rwado
haars001@app-test:/nfsrods/GUESTS$ ls -n | tail
drwx------+ 1 16825946 65534 0 Jul  8 11:19 wanga01
drwx------+ 1 16825946 65534 0 Jul  8 11:23 wimutt01
drwx------+ 1 16825946 65534 0 Jul  8 11:23 wimutt01
drwx------+ 1 16825946 65534 0 Jul  8 11:23 wimutt01
drwx------+ 1 16825946 65534 0 Jul  8 11:23 wimutt01
drwx------+ 1 16825946 65534 0 Jul  8 11:23 wimutt01
drwx------+ 1 16825946 65534 0 Jul  8 11:26 yusuf01
drwx------+ 1 16825946 65534 0 Jul  8 11:26 yusuf01
drwx------+ 1 16825946 65534 0 Jul  8 11:26 yusuf01
drwx------+ 1 16825946 65534 0 Jul  8 11:26 yusuf02

So:

• How can we fix the multiple outputs for a single folder?
• How can we fix the permissions?

As it is right now, we can't open it up to our users for security and UX reasons.

P.S.

My account is in anunna_admins, so that might explain how I can enter the fodler, but it doesn't explain the uid being put to my account.

[alanking]

What version of NFSRODS is this? What version of iRODS is the server with which it is communicating?

Can you show the ACLs on the collections to which those directories map (as well as any parent collections)? This can be done with ils -A.

[jvhaarst]

The permissions was me being thick, I am an admin so all files are ofcourse "mine".
For the multiple outputs per collection, we are going to do some more digging. The weird thing is that newly created collections are fine. We'll dig a bit deeper, and let you know what comes up.
We are using 2.3.1