Mixed Security provides the fine grain access control that I need for various security issues. However if a tree has NT security (with inheritance) a number of UNIX problems rear their ugly head, with UNIX security, I don't have the control that I need. I guess the only solution is to wait for MicroSoft to take over the world, or Sun/HP/Linux to support NFS version 4 (I'm not holding my breath).
My current issue centers around gzip/compress which will not work if inheritance is turned on.
The different paradigm for security between NT-acls and standard UNIX makes for an ugly solution.
Does EMC have a solution?...
Cheers, Paul Lupa Sr.System Analyst Motorola, Austin
-----Original Message----- From: Kelly McQuarrie [mailto:kellym@sd.us.am.ericsson.se] Sent: Tuesday, May 07, 2002 3:29 PM To: Maglinger, Paul Cc: 'NetApps list server' Subject: Re: FW: mixed security style
People running stuff from unix on an NTFS file system don't run into problems? Do they every lose access to there files from Unix because of changes made from NT?
Kelly McQuarrie Unix System Administrator Ericsson CDMA Systems
On Tue, 7 May 2002, Maglinger, Paul wrote:
We have mixed NT and Unix environment. If the qtree is strictly Unix, we set the style for Unix. If both use it, then I have it set for NTFS. We tried running mixed and sometimes Unix could access it and sometimes it couldn't. Seemed to be the same with NT, just kinda flaky stuff. I'm an NT admin, so this works great for me <grin>, but the Unix admin doesn't seem to have a problem with it set up this way... We also disabled the oplocks.
-----Original Message----- From: Kelly McQuarrie [mailto:kellym@sd.us.am.ericsson.se] Sent: Tuesday, May 07, 2002 14:06 To: toasters@mathworks.com Subject: mixed security style
Hello all:
I have a large number of windows/unix home directories on my NetApps all under unix qtrees. I'm a unix admin so this works great for me but the NT admins have complained that they can access their users data. I would like any war stories, opions, etc from people who have tried and or use the mixed qtrees for this purpose. Any suggestions and what not are totally welcomed!
Thank you sooo much for your time 8)
Kelly McQuarrie Unix System Administrator Ericsson CDMA Systems