Is there a way to get a big text list of per-file/directory metadata from Data OnTAP / WAFL itself?
I need to generate a list of all file ACLs/ACEs/permissions for audit purposes, and we used mixed mode qtrees everywhere (a decision I am trying to get reversed), so there isn't one platform capable of generating the list for all types of permissions (Unix, NFSv4, CIFS).
Also I don't know how to tell which permission mode a specific file happens to be in (is there a command to show one this information?), so even generating separate lists for each of the 3 categories and merging them wouldn't be of much help (without knowing which ones are "real").
Thanks for any help, -Danny
You can use xcalcs on the windows side with cscript to dump to a file you just have to feed it the server(filer name) and dir you want it to dump.
http://support.microsoft.com/?id=825751
the article talks about modifing NTFS permissions but it will just dump a list of ACLs as well. I use it for large file changes I don't want to do by hand.
On the unix side you can use
*getacl* and set a cron job to parse for you. This takes a little bit of setup but beats transversing days of files.
Mixed qtrees work off of last touched theory. The only thing I know that sees both is secure share. Others may want to chime in on this one. I'm not sure if you will find a tool to scan both permission except on Linux. I suspect a Linux box with the read only NTFS driver built into the kernel maybe able to do this but have never tried. NTFS is experimental on Linux so I wouldn't go recompiling a kernel on anything you use regularly :)
Good luck,
Grey
On 5/4/06, Daniel Clark dclark@pobox.com wrote:
Is there a way to get a big text list of per-file/directory metadata from Data OnTAP / WAFL itself?
I need to generate a list of all file ACLs/ACEs/permissions for audit purposes, and we used mixed mode qtrees everywhere (a decision I am trying to get reversed), so there isn't one platform capable of generating the list for all types of permissions (Unix, NFSv4, CIFS).
Also I don't know how to tell which permission mode a specific file happens to be in (is there a command to show one this information?), so even generating separate lists for each of the 3 categories and merging them wouldn't be of much help (without knowing which ones are "real").
Thanks for any help, -Danny