Server Fault is a question and answer site for system and network administrators. Join them; it only takes a minute:

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

So NFSv4 acls don't ignore the umask as far as I can tell. And nfsv3 with kerberos has its own host of problems (with autofs - race conditions with pam).

So if we want to use an nfs like system with autofs support what alternatives are there. I've heard of AFS but it is not suited for what we need. (Autofs mounts the home directories for a few thousand users from 3 different nfs hosts). ACLS are used for giving access to repositories and other directories to users that don't happen to be in the same group and adding them to groups would not be easy (for them).

We originally went with nfsv3 but that has security problems and group issues (sysauth) so we went to nfsv4 with kerberos and it worked great, until we tried to do acls. In nfsv3 acls were nice and easy we could set the default mask to be inherited but for nfsv4 there is no such functionality.

share|improve this question
Instead of "NFSv4 acls don't ignore the umask", did you mean to say "NFSv4 gives priority to umask over ACLs on the client", as discussed here: – ostrokach Aug 4 '15 at 18:08

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Browse other questions tagged or ask your own question.