toasters

toasters@lists.teaparty.net

13520 discussions

SV: mixed security style
by Öberg Mats 08 May '02

08 May '02

Hi, We are using mixed-style security on a shared-project-structure with a lot of problems, even though most of them have been resolved by now. We´ve seen a lot of strange things going on with M$-office-files that can't be saved even if it looks like the user has the apropriate rights, files changing permissions when saved. Another major annoyance is the inability to move/rename/delete unix-files from the unix-side if the directory they are in doesn´t allow the user FULL rights, you would think CHANGE is enough. (it´s really strange for me as a unix-guy when I can change the contents of a file, create new files in the same directory, but can´t rename the file). But we have also seen CAD-programs stop working because the structure they access have ACL's set on them. (CATIA, MENTOR, I-DEAS) I'm not sure how compilers, make , stuff like CVS,PVCS work. Another thing to consider is that users can only tell if a file/directory has unix- or nt-security if they have the ssaccess-utility installed (or the commandline version). There is no way of knowing this from the unix-side. This has made administration much more complex, especially since our mixed structure contains around 1-million directories. If I could, I would move away from mixed-security as fast as possible, but right now I have to live with it. ---- Mats

1 0

Re: mixed security style
by kelvin.spaulding＠kodak.com 08 May '02

08 May '02

From: Kelvin D Spaulding We've been using mixed-style qtrees for home directories for a little more than a year with no real problems. At first the users had some difficulties understanding how the permissions worked. The ones who actually cared contacted our IT organization and we explained how it worked. We do the initial setting to NTFS when the home directories are created. This causes the UNIX folk to see what appears to be mode 777 home directories. We needed to belay their concerns that we were creating wide-open areas. Some of our admins had some difficulty grasping the idea also; but we worked our way through that. All-in-all, we've been very happy with the mixed-style qtrees for home directories. Kelly Spaulding Eastman Kodak Co. Commercial & Government Systems kelvin.spaulding(a)kodak.com Kelly McQuarrie <kellym(a)sd.us.am.ericsson.se>@mathworks.com on 05/07/2002 03:05:41 PM Sent by: owner-toasters(a)mathworks.com To: toasters(a)mathworks.com cc: Subject: mixed security style Hello all: I have a large number of windows/unix home directories on my NetApps all under unix qtrees. I'm a unix admin so this works great for me but the NT admins have complained that they can access their users data. I would like any war stories, opions, etc from people who have tried and or use the mixed qtrees for this purpose. Any suggestions and what not are totally welcomed! Thank you sooo much for your time 8) Kelly McQuarrie Unix System Administrator Ericsson CDMA Systems

1 0

qtree properties
by neil lehrer 08 May '02

08 May '02

i use qtree quotas with ontap 6.1x nfs and cifs. from windows i can just get properties on a qtree and i see its quota and usage. is there anyway to do that from a unix host? du would take a while and i could run a quota report, but i was curious if there were another way? -- regards

4 3

Link Failure Count and High Loss of Sync Count
by Nicholas Chua 08 May '02

08 May '02

Hi all, Based on the info below, is it an indication of poor FC or poor disk? Perhaps 0a.0 and 01.16? Given the short amount of time since last reboot and the amount of data transferred. Thanks for any input. Nic. netapp1> uptime 7:02pm up 22:27 59382160 NFS ops, 182 CIFS ops, 129 HTTP ops netapp1> fcstat link_stats 0a Loop Link Underrun Loss of Invalid Frame In Frame Out ID Failure count sync CRC count count count count count 0a.0 20 0 3893 0 497976 968640 ----- 0a.16 0 0 100 0 4711400 1645910 0a.17 0 0 3 0 4289135 9098615 ----- 0a.12 0 0 15 0 1467678 5654114 __________________________________________________ Do You Yahoo!? Yahoo! Health - your guide to health and wellness http://health.yahoo.com

1 0

Odd Symlink Problem
by Barry Lustig 08 May '02

08 May '02

I have a toaster running 6.1.1R2. On vol0 there is a mixed qtree called public. The NT ACLS on /vol/vol0/public have everything except full control turned on for the domain users. The strangeness occurs when I create a symlink under that directory. the user can create the link but only root can delete it. Any ideas? barry

1 0

Reflection NFS issues on 6.2
by Jeff Kennedy 07 May '02

07 May '02

We use Reflections NFS for PC users to access data on our filers. Up until 6.2 it worked fine, after upgrading we are having what appear to be sporadic issues with users not being able to access/write data that we know they have perissions to. Has anyone experienced or heard of this and whether or not there's a fix? Thanks. -- ===================== Jeff Kennedy Unix Administrator AMCC jlkennedy(a)amcc.com

1 0

mixed security style
by Kelly McQuarrie 07 May '02

07 May '02

Hello all: I have a large number of windows/unix home directories on my NetApps all under unix qtrees. I'm a unix admin so this works great for me but the NT admins have complained that they can access their users data. I would like any war stories, opions, etc from people who have tried and or use the mixed qtrees for this purpose. Any suggestions and what not are totally welcomed! Thank you sooo much for your time 8) Kelly McQuarrie Unix System Administrator Ericsson CDMA Systems

3 2

RE: FW: mixed security style
by Lupa Paul-ra5507 07 May '02

07 May '02

Mixed Security provides the fine grain access control that I need for various security issues. However if a tree has NT security (with inheritance) a number of UNIX problems rear their ugly head, with UNIX security, I don't have the control that I need. I guess the only solution is to wait for MicroSoft to take over the world, or Sun/HP/Linux to support NFS version 4 (I'm not holding my breath). My current issue centers around gzip/compress which will not work if inheritance is turned on. The different paradigm for security between NT-acls and standard UNIX makes for an ugly solution. Does EMC have a solution?... Cheers, Paul Lupa Sr.System Analyst Motorola, Austin -----Original Message----- From: Kelly McQuarrie [mailto:kellym@sd.us.am.ericsson.se] Sent: Tuesday, May 07, 2002 3:29 PM To: Maglinger, Paul Cc: 'NetApps list server' Subject: Re: FW: mixed security style People running stuff from unix on an NTFS file system don't run into problems? Do they every lose access to there files from Unix because of changes made from NT? Kelly McQuarrie Unix System Administrator Ericsson CDMA Systems On Tue, 7 May 2002, Maglinger, Paul wrote: > We have mixed NT and Unix environment. If the qtree is strictly Unix, we > set the style for Unix. If both use it, then I have it set for NTFS. We > tried running mixed and sometimes Unix could access it and sometimes it > couldn't. Seemed to be the same with NT, just kinda flaky stuff. I'm an NT > admin, so this works great for me <grin>, but the Unix admin doesn't seem to > have a problem with it set up this way... We also disabled the oplocks. > > -----Original Message----- > From: Kelly McQuarrie [mailto:kellym@sd.us.am.ericsson.se] > Sent: Tuesday, May 07, 2002 14:06 > To: toasters(a)mathworks.com > Subject: mixed security style > > > Hello all: > > I have a large number of windows/unix home directories on my NetApps all > under unix qtrees. I'm a unix admin so this works great for me but the NT > admins have complained that they can access their users data. I would > like any war stories, opions, etc from people who have tried and or use > the mixed qtrees for this purpose. Any suggestions and what not are > totally welcomed! > > Thank you sooo much for your time 8) > > Kelly McQuarrie > Unix System Administrator > Ericsson CDMA Systems >

1 0

FW: mixed security style
by Maglinger, Paul 07 May '02

07 May '02

We have mixed NT and Unix environment. If the qtree is strictly Unix, we set the style for Unix. If both use it, then I have it set for NTFS. We tried running mixed and sometimes Unix could access it and sometimes it couldn't. Seemed to be the same with NT, just kinda flaky stuff. I'm an NT admin, so this works great for me <grin>, but the Unix admin doesn't seem to have a problem with it set up this way... We also disabled the oplocks. -----Original Message----- From: Kelly McQuarrie [mailto:kellym@sd.us.am.ericsson.se] Sent: Tuesday, May 07, 2002 14:06 To: toasters(a)mathworks.com Subject: mixed security style Hello all: I have a large number of windows/unix home directories on my NetApps all under unix qtrees. I'm a unix admin so this works great for me but the NT admins have complained that they can access their users data. I would like any war stories, opions, etc from people who have tried and or use the mixed qtrees for this purpose. Any suggestions and what not are totally welcomed! Thank you sooo much for your time 8) Kelly McQuarrie Unix System Administrator Ericsson CDMA Systems

2 1

Error on Gigabit Card
by Manoj Kolekar 06 May '02

06 May '02

Hello toasters, I am getting the bellow Erros onn my F840 gigabit card, "Mon May 6 10:46:46 GMT [GbE-II/e4:error]: arp: 00:06:5b:3a:1d:0c attempts to modify permanent entry for 192.168.57.63 on e4 Mon May 6 10:51:29 GMT [GbE-II/e4:error]: arp: 00:06:5b:3a:1d:0c attempts to modify permanent entry for 192.168.57.63 on e4 Mon May 6 10:51:38 GMT [GbE-II/e4:error]: arp: 00:06:5b:3a:1d:0c attempts to modify permanent entry for 192.168.57.63 on e4 The filer seems to be working fine. Does any one out there have any idea as to what could be wrong. -- Best regards, Manoj mailto:manoj@apara.com

2 1

Jump to page:

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

2003

2002

2001

2000

1999

1998

1997

toasters