Paradoxically we are copying over account information to maintain up to date entries in our usermap.cfg & passwd files on the Filer to allow UNIX clients access to NTFS volumes. We can use the same files to allow the relevant UNIX account access to a NTFS share but it increases the likelihood of failure in the process. For now however this does look like our best option. However from my understanding using NDMPCOPY to copy files from NTFS to UNIX should not have this type of security implication as it should not attempt to copy over ACL information so I am very surprised by what is happening.
rgds, J
On Fri, Oct 17, 2008 at 5:50 PM, Jeffries, Mark Mark.Jeffries@dkib.comwrote:
In a nutshell no, the only file level copy you can perform on a filer's console is ndmpcopy. When you copy from a Unix to an NTFS qtree (or vice versa) all sorts of strange permission based problems occur as NTFS and Unix permissions are not interchangeable. Why do you need to copy between the 2 qtrees? I would personally set up a single Unix qtree and do some CIFS user and group mappings to allow windows (CIFS) access. It's easier to do it this way round I have found, but most importantly, STAY AWAY FROM MIXED QTREES.
I hope that helps,
Jeffers.
*From:* owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] *On Behalf Of *Jimmy Corncrake *Sent:* 17 October 2008 16:04 *To:* Nils Vogels *Cc:* toasters@mathworks.com *Subject:* Re: File Copy between NTFS & UNIX Qtrees
Hi, we are copying over just single files not the complete qtree. The UNIX secured QTREE is accessible until we copy over a single file from the the NFTS QTREE which result in permission denied. It should not copy the permissions when the destination is UNIX but this appears to be happening.
Is there anything else I can use apart from ndmpcopy to make the single file copy within the filer console?
On Fri, Oct 17, 2008 at 3:37 PM, Nils Vogels bacardicoke@gmail.comwrote:
Are you copying the entire qtree, or specific files?
If you are copying the entire qtree, it is likely that ndmpcopy copies the qtree security style as well, causing the problems you described . (and others as well )..
On Fri, Oct 17, 2008 at 3:14 PM, Jimmy Corncrake oisintno@gmail.com wrote:
Hi Toasters,
I have setup 2 qtrees. QT1 is NTFS and QT2 is UNIX. File Data needs to
be
passed between the 2 QTREES in both directions which I am doing using ndmpcopy. However an unexpected consequence of this action is that the
UNIX
user account looses access to the UNIX QTREE after the copy if made from
QT1
to QT2. Does anyone know what could cause this and how I can get around
it?
Both QTREEs are in the same Volume but I would not expect this to be relevant.
thanks, Jimmy
-- Simple guidelines to happiness: Work like you don't need the money, Love like your heart has never been broken and Dance like no one can see you. The information contained in this email is strictly confidential and for the use of the addressee only, unless otherwise indicated. If you are not the intended recipient, please do not read, copy, use or disclose to others this message or any attachment. Please also notify the sender by replying to this email or by telephone (+44 (0)20 7896 0011) and then delete the email and any copies of it. Opinions, conclusions (etc.) that do not relate to the official business of this company shall be understood as neither given nor endorsed by it. IG Index plc is a company registered in England and Wales under number 01190902. VAT registration number 761 2978 07. Registered Office: Friars House, 157-168 Blackfriars Road, London SE1 8EZ. Authorised and regulated by the Financial Services Authority. FSA Register number 114059.
The information contained herein is confidential and is intended solely for the addressee. Access by any other party is unauthorised without the express written permission of the sender. If you are not the intended recipient, please contact the sender either via the company switchboard on +44 (0)20 7623 8000, or via e-mail return. If you have received this e-mail in error or wish to read our e-mail disclaimer statement and monitoring policy, please refer to http://www.dresdnerkleinwort.com/disc/email/ or contact the sender.