Very useful for controlling growth and impact from individual groups/users. However, nearly impossible to effectively manage without being extremely time consuming.
We've looked at NTP Software's QFS product and like it - just a matter of funding.
Glenn
-----Original Message----- From: owner-toasters@mathworks.com [mailto:owner-toasters@mathworks.com] On Behalf Of Stephen C. Losen Sent: Wednesday, March 05, 2008 4:23 PM To: Bill Holland Cc: Kevin Parker; toasters@mathworks.com Subject: Re: Quotas for A.D. groups
Unfortunately, group quotas won't work in native ONTAP as AD groups do
not map to UNIX groups properly. User and qtree quotas work fine. You could create qtrees that belong to the specific AD groups and place quotas on those.
Also, netapp "group quotas" may not work like you want. In the Unix/NFS world, each file has a group id. A group quota limits the total disk space consumed by all files that have a particular group id. It does not matter who owns the files. Group quotas are easy to circumvent because the owner of a file can change its group id to any group that the owner belongs to.
Some folks mistakenly think that a "group quota" restricts the total disk space consumed by all the members of the group. In other words, if a group has members A, B, and C and the group quota is 10 Gbyte then disk space consumed by files owned by A, B, or C cannot exceed 10 Gbyte. This is NOT how group quotas work.
As others have stated, you probably need a qtree. Has anyone ever found netapp group quotas to be useful at all?
----- Original Message ----- From: Kevin Parker To: toasters@mathworks.com Sent: Wednesday, March 05, 2008 1:19 PM Subject: Quotas for A.D. groups
Toasters:
Client wants ability to quota by Active Directory group. I see some
products out there, but none seem to be able to set a quota on a volume/qtree/directory with the quota pertaining to an A.D. group.
Only way I've implemented these in the past is to control access via
NTFS ACL such that the A.D. group has write access (everyone else read or none), then set qtree quota. Client has political reasons not to restrict access via NTFS. This is NAS/CIFS only environment.
Has anyone else out there found another way, or using any other 3rd
party *ware?
Best regards,
Kevin M. Parker
Sr. Storage Solutions Engineer l 919.830.5819 mobile l 919.653.4489
office l 860 Aviation Pkwy., Ste. 1000, Morrisville, NC 27560
------------------------------------------------------------------------ ------
Note: This message and any attachments is intended solely for the
use of the individual or entity to which it is addressed and may contain information that is non-public, proprietary, legally privileged, confidential, and/or exempt from disclosure. If you are not the intended recipient, you are hereby notified that any use, dissemination, distribution, or copying of this communication is strictly prohibited. If you have received this communication in error, please notify the original sender immediately by telephone or return email and destroy or delete this message along with any attachments immediately.
Steve Losen scl@virginia.edu phone: 434-924-0640
University of Virginia ITC Unix Support