Identity and ACL Migration

In order to properly migrate identity information for files, including ACLs, the following rules must be observed:

• The migration source and target ZFSSA must have the same name service configuration.

• The migration source and target ZFSSA must have the same NFSv4 mapid domain

• The migration source must support NFSv4. Use of NFSv3 is possible, but some loss of information will result. Basic identity information (owner and group) and POSIX permissions will be preserved, but any ACLs will be lost.

• The migration source must be exported with root permissions to the ZFSSA.

If you see files or directories owned by "nobody", it likely means that the ZFSSA does not have name services setup correctly, or that the NFSv4 mapid domain is different. If you get 'permission denied' errors while traversing filesystems that the client should otherwise have access to, the most likely problem is failure to export the migration source with root permissions.