toasters June 2000

toasters@lists.teaparty.net

121 participants
153 discussions

RE: NT + Unix access rights
by mark.muhlestein＠netapp.com 01 Jun '00

01 Jun '00

As explained in the security guide, access to files with NT security is based on the NT account, while access to files with UNIX security is based on the UNIX account. You can review http://now.netapp.com/NOW/knowledge/docs/olio/guides/53_troubleshooting/ind… tml to understand multi-protocol security. This is described in the "Concepts" section. Mark > -----Original Message----- > From: Michael van Elst [mailto:mlelstv@xlink.net] > Sent: Thursday, June 01, 2000 4:07 AM > To: Muhlestein, Mark > Cc: mlelstv(a)xlink.net; toasters(a)mathworks.com > Subject: Re: NT + Unix access rights > > > On Wed, May 31, 2000 at 04:54:56PM -0700, > mark.muhlestein(a)netapp.com wrote: > > > I see your problem: WEBMAILER\Administrator is not a member of > > BUILTIN\Administrators on the filer. You should add > "WEBMAILER\Domain Admins" as > > a member of BUILTIN\Administrators on the filer using User > Manager for Domains. > > By default, only the "Domain Admins" group from the domain > the filer is > > installed into is placed as a member of the filer's > BUILTIN\Administrators > > group. > > > Would this give the WEBMAILER\Domain Admins full authority over > the files that use the UNIX security model or just over those > files that use the NT security model ? > > > > > > > > After fixing this, you're going to want to do a "wcc -x" to > force a remapping. > > > > Mark > > > > > -----Original Message----- > > > From: Michael van Elst [mailto:mlelstv@xlink.net] > > > Sent: Wednesday, May 31, 2000 4:20 PM > > > To: Muhlestein, Mark > > > Cc: mlelstv(a)xlink.net > > > Subject: Re: NT + Unix access rights > > > > > > > > > On Wed, May 31, 2000 at 04:02:42PM -0700, > > > mark.muhlestein(a)netapp.com wrote: > > > > > > Hi, > > > > > > > This is a mixed qtree, right? Can you send the output of > > > "wcc -dvv" after > > > > attempting to do the "chown"? The mapped user doing the > > > "chown" has to be a > > > > member of builtin\administrators. > > > > > > here is the relevant part: > > > > > > root (UID 0) from 123.45.67.89 => WEBMAILER\Administrator > > > *************** > > > UNIX uid = 0 > > > > > > NT membership > > > WEBMAILER\Administrator > > > WEBMAILER\Domain Users > > > WEBMAILER\Domain Admins > > > User is also a member of Everyone, Network Users, > > > Authenticated Users > > > *************** > > > > > > Michael van Elst > > > > > > > > > > > Mark > > > > > > > > > -----Original Message----- > > > > > From: Michael van Elst [mailto:mlelstv@xlink.net] > > > > > Sent: Wednesday, May 31, 2000 2:56 PM > > > > > To: Muhlestein, Mark > > > > > Cc: mlelstv(a)xlink.net; toasters(a)mathworks.com > > > > > Subject: Re: NT + Unix access rights > > > > > > > > > > > > > > > On Tue, May 30, 2000 at 01:34:03PM -0700, > > > > > mark.muhlestein(a)netapp.com wrote: > > > > > > > Apparently the file uses the NT security model in the > > > mixed qtree > > > > > > > and the file owner has locked himself and others out. > > > > > > > > > > > > > > > > If this is the case, you should be able to take > > > ownership from NT. > > > > > > > > > > This was unsuccessful so far. > > > > > > > > > > > > > > > > There was a > > > > > > bug with take ownership (#21325), which is fixed in 5.3.5R2. > > > > > > > > > > I have to check with other people if upgrading the > > > current production > > > > > system to, what I was told is an early-access release, is > > > an option. > > > > > > > > > > > > > > > > You should also be > > > > > > able to do a "chmod" or "chown" from NFS root and get > > > > > control of the file. > > > > > > > > > > This is not possible. Both fail with the error "Not owner". > > > > > > > > > > > > > > > > If > > > > > > that fails, you should do the rc_toggle_basic command > > > > > "lock_dump -f" and see if > > > > > > your file is locked. > > > > > > > > > > The files are not locked according to lock_dump -f. > > > > > > > > > > > > > > > -- > > > > > i.A. Michael van Elst / phone: +49 > > > > > 721 9652 330 > > > > > Xlink - Network Information Centre \/ fax: +49 > > > > > 721 9652 349 > > > > > Emmy-Noether-Strasse 9 /\ link > > http://nic.xlink.net/ > > > > D-76131 Karlsruhe, Germany /_______ email: > > > > hostmaster(a)xlink.net > > > > [ KPNQwest Germany GmbH, Sitz Karlsruhe > > > > ] > > > > [ Amtsgericht Karlsruhe HRB 8161, Geschaeftsfuehrer: Koen > > > > Bertoen ] > > > > > > -- > > i.A. Michael van Elst / phone: +49 > 721 9652 330 > > Xlink - Network Information Centre \/ fax: +49 > 721 9652 349 > > Emmy-Noether-Strasse 9 /\ link > http://nic.xlink.net/ > > D-76131 Karlsruhe, Germany /_______ email: > hostmaster(a)xlink.net > > [ KPNQwest Germany GmbH, Sitz Karlsruhe > ] > > [ Amtsgericht Karlsruhe HRB 8161, Geschaeftsfuehrer: Koen > Bertoen ] > -- > i.A. Michael van Elst / phone: +49 > 721 9652 330 > Xlink - Network Information Centre \/ fax: +49 > 721 9652 349 > Emmy-Noether-Strasse 9 /\ link http://nic.xlink.net/ > D-76131 Karlsruhe, Germany /_______ email: > hostmaster(a)xlink.net > [ KPNQwest Germany GmbH, Sitz Karlsruhe > ] > [ Amtsgericht Karlsruhe HRB 8161, Geschaeftsfuehrer: Koen > Bertoen ] >

1 0

RE: NT + Unix access rights
by mark.muhlestein＠netapp.com 01 Jun '00

01 Jun '00

I see your problem: WEBMAILER\Administrator is not a member of BUILTIN\Administrators on the filer. You should add "WEBMAILER\Domain Admins" as a member of BUILTIN\Administrators on the filer using User Manager for Domains. By default, only the "Domain Admins" group from the domain the filer is installed into is placed as a member of the filer's BUILTIN\Administrators group. After fixing this, you're going to want to do a "wcc -x" to force a remapping. Mark > -----Original Message----- > From: Michael van Elst [mailto:mlelstv@xlink.net] > Sent: Wednesday, May 31, 2000 4:20 PM > To: Muhlestein, Mark > Cc: mlelstv(a)xlink.net > Subject: Re: NT + Unix access rights > > > On Wed, May 31, 2000 at 04:02:42PM -0700, > mark.muhlestein(a)netapp.com wrote: > > Hi, > > > This is a mixed qtree, right? Can you send the output of > "wcc -dvv" after > > attempting to do the "chown"? The mapped user doing the > "chown" has to be a > > member of builtin\administrators. > > here is the relevant part: > > root (UID 0) from 123.45.67.89 => WEBMAILER\Administrator > *************** > UNIX uid = 0 > > NT membership > WEBMAILER\Administrator > WEBMAILER\Domain Users > WEBMAILER\Domain Admins > User is also a member of Everyone, Network Users, > Authenticated Users > *************** > > Michael van Elst > > > > > Mark > > > > > -----Original Message----- > > > From: Michael van Elst [mailto:mlelstv@xlink.net] > > > Sent: Wednesday, May 31, 2000 2:56 PM > > > To: Muhlestein, Mark > > > Cc: mlelstv(a)xlink.net; toasters(a)mathworks.com > > > Subject: Re: NT + Unix access rights > > > > > > > > > On Tue, May 30, 2000 at 01:34:03PM -0700, > > > mark.muhlestein(a)netapp.com wrote: > > > > > Apparently the file uses the NT security model in the > mixed qtree > > > > > and the file owner has locked himself and others out. > > > > > > > > > > If this is the case, you should be able to take > ownership from NT. > > > > > > This was unsuccessful so far. > > > > > > > > > > There was a > > > > bug with take ownership (#21325), which is fixed in 5.3.5R2. > > > > > > I have to check with other people if upgrading the > current production > > > system to, what I was told is an early-access release, is > an option. > > > > > > > > > > You should also be > > > > able to do a "chmod" or "chown" from NFS root and get > > > control of the file. > > > > > > This is not possible. Both fail with the error "Not owner". > > > > > > > > > > If > > > > that fails, you should do the rc_toggle_basic command > > > "lock_dump -f" and see if > > > > your file is locked. > > > > > > The files are not locked according to lock_dump -f. > > > > > > > > > -- > > > i.A. Michael van Elst / phone: +49 > > > 721 9652 330 > > > Xlink - Network Information Centre \/ fax: +49 > > > 721 9652 349 > > > Emmy-Noether-Strasse 9 /\ link http://nic.xlink.net/ > > D-76131 Karlsruhe, Germany /_______ email: > > hostmaster(a)xlink.net > > [ KPNQwest Germany GmbH, Sitz Karlsruhe > > ] > > [ Amtsgericht Karlsruhe HRB 8161, Geschaeftsfuehrer: Koen > > Bertoen ] > > -- i.A. Michael van Elst / phone: +49 721 9652 330 Xlink - Network Information Centre \/ fax: +49 721 9652 349 Emmy-Noether-Strasse 9 /\ link http://nic.xlink.net/ D-76131 Karlsruhe, Germany /_______ email: hostmaster(a)xlink.net [ KPNQwest Germany GmbH, Sitz Karlsruhe ] [ Amtsgericht Karlsruhe HRB 8161, Geschaeftsfuehrer: Koen Bertoen ]

2 1

Ait2 Robots supported?
by Brian Hostetter 01 Jun '00

01 Jun '00

Has anyone hooked up an AIT2 drive to their filers? I had two 760's shipped out today and am going to need a nice large tape system to back them up. I plan on using the time manager ndmp solution for backups and would like to use a Qualstar 4400 series tape library. Anyone have any luck with them or can anyone suggest a 4-8 tape DLT system? --Brian

4 3

Jump to page:

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters June 2000