Setting umask for globus server v5

[Bill Conn]

Hello,

Our install of GCS v5 appears to be using 022 (system default for root) for the umask.  I would like to change that so group members can automatically have write access to each others files.  The FAQ (https://docs.globus.org/faq/transfer-sharing/#setting_the_umask) says you can do this in /etc/init.d/globus-connect-server which I think is now in /etc/gridftp.d/globus-connect-server due to the move to systemd.  However, I didn't find any actual instructions on how to set that in the file, I tried the obvious 'umask 002' but it doesn't like that.  Did I miss it in the documentation and if not, how can I set the umask for GCS v5 to use?

Thanks,

Bill

[Jason Alt]

Hi Bill-

You can change the umask for the gridftp service, since it is launched by systmed, by modifying the systemd configuration for the service. Set UMask= under the [Service] section in /usr/lib/systemd/system/globus-gridftp-server.service(that is where it is on RHEL/CentOS at least). Then run systemctl reload globus-gridftp-server.service and systemctl restart globus-gridftp-server.service. That may get clobbered by Globus updates so keep an eye on it.

You may also need to set the 'perms' option for the GridFTP service which sets the default permissions to use on new objects:

 -perms <string>                   Set the default permissions for created
  Default: not set                 files. Should be an octal number such as
                                           0644.  The default is 0644.  Note: If umask
                                           is set it will affect this setting -- i.e.
                                           if the umask is 0002 and this setting is
                                          0666, the resulting files will be created
                                          with permissions of 0664.

Create a new file in /etc/gridftp.d, for example /etc/gridftp.d/fix_file_permissions, with contents "perms 0664". Using a new file will help keep the file from getting squashed on updates. Restart the service and you should be all set.

Hope that helps

Jason

[Conn, Bill James]

Thanks Jason.  After implementing both of those changes newly created folder and data copied into the share appear to get the permissions I was looking for.

 

Bil

 

From: Jason Alt <jaso...@globus.org>
Reply-To: "admin-...@globus.org" <admin-...@globus.org>
Date: Thursday, April 16, 2020 at 1:06 PM
To: "admin-...@globus.org" <admin-...@globus.org>
Subject: Re: [Globus AD] Setting umask for globus server v5

 

CAUTION: This email originated from outside of the organization. Do not click links or open attachments unless you recognize the sender and know the content is safe.

 

--
To unsubscribe from this group and stop receiving emails from it, send an email to admin-discus...@globus.org.