I have a filer with UNIX and NT data. I want to move via ndmp to a larger filer. In preparation for the data move I read somewhere that in order for NT data to maintain security permissions, the destination must be NTFS formatted. Is this true, and how do you perform this if the host is a Unix machine but other NT servers are available. Also how would UNIX data fit on an NTFS format. Any help is greatly appreciated.
Jessica
JESSICA A. S. FERNANDEZ ESA-FM Facility Management E-mail: jasf@lanl.gov TA-16-661-101, MS-C933 Voice: 505-665-8051 Los Alamos National Laboratory Pager: 104-6707 Los Alamos, New Mexico 87545 FAX: 505-665-9490
On Fri, Jun 08, 2001 at 04:53:45PM -0600, Jessica Fernandez wrote:
I have a filer with UNIX and NT data. I want to move via ndmp to a larger filer. In preparation for the data move I read somewhere that in order for NT data to maintain security permissions, the destination must be NTFS formatted. Is this true, and how do you perform this if the host is a Unix machine but other NT servers are available. Also how would UNIX data fit on an NTFS format. Any help is greatly appreciated.
This is not the case.
First of all, having UNIX or NT data isn't relevant to this issue. It is the security style of the volumes or qtrees that is of importance. These can be determined by running the command "qtree" on the filer console (or through rsh). The values will be either "unix", "ntfs", or "mixed".
If you use NDMPcopy to move data between filers, the security styles of underlying volumes and qtrees makes no difference. You only want to ensure that the destination volumes/qtrees are the same security style as the source.
What you probably heard is that you can copy both UNIX and NTFS security style permissions using an NT tool, but you can only copy UNIX security style permissions using a UNIX tool. This is because UNIX cannot read or write NTFS ACE's/ACL's; however, NTFS can use "extended attributes" (old OS/2 concept I believe) to copy UNIX read/write UNIX permissions. You might want to verify the validity of this statement with NetApp as we've never really tried that. If we're moving UNIX data, we use ndmpcopy or tar/rsync. If we're moving NT data, we use ndmpcopy or robocopy. If we are moving multi-security style data, we use ndmpcopy.
As long as you are moving data from filers to filers, ndmpcopy should work nicely. You may want to investigate other tools such as "vol copy" and "SnapMirror" as they also work well between filers. If you have to move data from or to a non-filer (UNIX box or NT box), then all three of these tools are out of the question and some UNIX/NT tool (such as tar, rsync, scopy, or robocopy) must be used.
-- Jeff
Dear Jessica,
For the NT security, the both filers must be set to NTFS or MIXED style (qtree option). Because you worked with unix and NT data, it must be MIXED style. There is no need to format your filer, it has it's own file system (WAFL).
Greetings,
Reinoud
UZ KULEUVEN BELGIUM ----- Original Message ----- From: Jessica Fernandez To: toasters@mathworks.com Sent: Saturday, June 09, 2001 12:53 AM Subject: NTFS Formatting
I have a filer with UNIX and NT data. I want to move via ndmp to a larger filer. In preparation for the data move I read somewhere that in order for NT data to maintain security permissions, the destination must be NTFS formatted. Is this true, and how do you perform this if the host is a Unix machine but other NT servers are available. Also how would UNIX data fit on an NTFS format. Any help is greatly appreciated.
Jessica
JESSICA A. S. FERNANDEZ ESA-FM Facility Management E-mail: jasf@lanl.gov TA-16-661-101, MS-C933 Voice: 505-665-8051 Los Alamos National Laboratory Pager: 104-6707 Los Alamos, New Mexico 87545 FAX: 505-665-9490
No offense Reinoud, but but security style has absolutely nothing to do with whether one has a filer "with UNIX and NT data". Security style only affects the nature of the file-level permissions. Either UNIX or NT files can be stored in any of the three security styles and in fact, often are.
We've found that best practice is to mixed style sparingly (we've never found a true need in our shop for it) and otherwise use UNIX or NT based on where the most permission modification is necessary. If any automated process is running in an area, we try to give it a security style native to that platform.
In fact, we typically use NT style pretty sparingly simply because most of our users don't diddle with permissions, so giving them ACL's is just enough rope to hang themselves - and all their co-workers too! While ACL's are powerful and appear simple to understand from the surface, many admins themselves have difficulty navigating through all the possibilities and often ACL's end up twisted and tortured beyond recognition (and usefulness).
That being said, I have a UNIX style home directory where I store just as many "NT" files as I do "UNIX" ones. Nothing prevents this. Similarly, we've got some "UNIX" data which resides in NT style qtrees.
-- Jeff
On Sun, Jun 10, 2001 at 10:11:05PM +0200, Reinoud Reynders wrote:
Dear Jessica,
For the NT security, the both filers must be set to NTFS or MIXED style (qtree option). Because you worked with unix and NT data, it must be MIXED style. There is no need to format your filer, it has it's own file system (WAFL).
Greetings,
Reinoud
UZ KULEUVEN BELGIUM ----- Original Message ----- From: Jessica Fernandez To: toasters@mathworks.com Sent: Saturday, June 09, 2001 12:53 AM Subject: NTFS Formatting
I have a filer with UNIX and NT data. I want to move via ndmp to a larger filer. In preparation for the data move I read somewhere that in order for NT data to maintain security permissions, the destination must be NTFS formatted. Is this true, and how do you perform this if the host is a Unix machine but other NT servers are available. Also how would UNIX data fit on an NTFS format. Any help is greatly appreciated.
JessicaJESSICA A. S. FERNANDEZ ESA-FM Facility Management E-mail: jasf@lanl.gov TA-16-661-101, MS-C933 Voice: 505-665-8051 Los Alamos National Laboratory Pager: 104-6707 Los Alamos, New Mexico 87545 FAX: 505-665-9490
-
Jeffrey Krueger -
Jessica Fernandez -
Reinoud Reynders