No subject

- more of an investment in infrastructure/configuration/management to
get it up and running
- typically at least comparable performance, and scaled pretty well so
can get much better if you throw hardware at it
- never seemed to have as many oddities, misbehaviors, and bad
interactions with other software
- really nice ACL system including the ability for users to manage
their own groups (Unfortunately, this was before posix ACLs, so I
don't know what the state is of interacting with existing linux ACLs.)
Honestly I never needed most of the power of AFS, but I ran it on my
system back in the day simply to be able to use the ACL features,
which I think were probably the best implementation I've seen on a
unix system.

Anymore, I just make do with posix ACLs when I need them, and do
everything with sshfs, which is adequate for my needs, but may not
scale well to replace a heavy use NFS server. (Though I know there are
people who do it.)

On Mon, May 11, 2009 at 2:14 PM, Ted Stern <dodecatheon at gmail.com> wrote:
> This is more of a general Unix question, but I'm looking for a
> solution on a Linux server.
>
> If a user accesses an NFS-mounted disk, NFS supports only the first 16
> groups of which that user is a member.
>
> This might seem ample for most small systems, but I'm at a large
> company with lots of projects, and due to accounting rules a plethora
> of groups were created over the years.
>
> We've done a major group cleanup (which should have been done anyway)
> but there are still some users who, because of their involvement with many
> projects, have to be members of lots of groups.
>
> So, two questions:
>
> 1) Is there any hope that NFS will support more than 16 groups in the
> near future?
>
>
> 2) Are there any alternatives to NFS?
>
> 3) Are there any network mountable filesystems that have support for
> access control lists?  Note that the protocol has to be at least as
> fast as NFS because we're supporting multi-GB file access.
>
> Thanks,
>
> Ted
> --
>  Frango ut patefaciam -- I break so that I may reveal
>