Tuesday Tech Tip - 5 Best Practices when Using CephFS and Samba

[@45Drives]

Chapters: 00:00 - Introduction 01:00 - Using Multiple Sambas 01:46 - Try Not to Co-Locate Samba & OSD Services 02:45 - Use CTDB Rados Locking 05:30 - Use Ceph Kernal Mounts 07:46 - Use Separate Mount Point for Each Share 11:01 - Outro

[@hpsfresh]

Trying to find good all in one smb server (like truenas) to place it in ceph-enabled proxmox and integrate with ldap. Can you advise solution?

[@RaynaldJadoul]

Thanks for sharing. Very insightful and useful.

[@DaniloMussolini]

Awesomw guys! Thanks.

[@katjadecuir3514]

Hello! I'm having an issue i can't seem to find documentation of.. Where i've got the cephfs working, but when setting permissions in windows, it seems like random files will fail, causing the operation to fail. what can i do to better support active directory ACLs on my cephfs samba share?

[@NathanLoosevelt]

Also having issues with windows ACL's. For some reason the group "Domain Users" gets inherited on all sub folders of a share with read permissions even though Domain Users is not on the root directory. Just started migrating our file shares over from the our old file server and this is a deal breaker until I can get it fixed.

[@katjadecuir3514]

@@NathanLoosevelt I had the same issue. Its being inherited from the share itself. my solution to this was first enabling ACLs on ceph itself and not just from the rest of the LXC hosting the samba share, but on the cephfs that was hosting the filestorage for that LXC.. and then in the LXC i was able to edit /etc/fstab to mount with acls too... then samba had no issue actually setting permissions and not just letting everyone access everything by having all users be inherited. i believe i then chmodded the files as the samba user and use the group mapped to the "samba admin" group in windows. i had to mess with permissions setting them from windows and checking them in linux to see what the id for that group was (ls -n is a great help) and then that gave me full admin status over everything and let me use windows to set the acl permissions now that the linux side of it made sense in a nutshell, its your linux permissions get inherited too, so you gotta figure out how to set them how you like. sounds like your situation is thankfully a lot more simple. but, after updating to windows server anything above 2012 r2, cephfs support is added. so we don't use samba anymore and as long as acls are turned on, its a lot more simple to "just work."

[@N0Reaver]

What about sharing just within a linux ecosystem? SAMBA or NFS? I still don't understand quotas with cephfs here ... if i want to have a single cephfs volume for /home and then shares for each users $HOME.