Sun Storage 5210 NAS Appliance
 
Sun Storage 5220 NAS Appliance
 
Sun Storage 5310 NAS Appliance
 
Sun Storage 5320 NAS Gateway/Cluster System
 
Sun Storage 5320 NAS Appliance
 
Sun Storage 5310 NAS Gateway System
 

GCS>Sun Microsystems>Storage - Disk>Network Attached Storage
 

Windows objects such as files or folders created on an export accessible via a Unix client cannot have their permissions changed from the UNIX[R]client or NAS head.

A NAS volume, and directory structure exists, this directory contains both a Windows share AND a Unix export for the directory.

Scenario 1:
-----------
Create a Windows object (directory or file) on the share mounted to a Windows Client. Move to a Unix client having access to the export above and run commands such as chmod, chown, and chgrp against the newly created windows object, the following error is generated:

 # chmod 775 TEST2
chmod: WARNING: can't change TEST2

Scenario 2:
-----------
Create a Windows object (directory or file) on the share mounted to a Windows client. From the NAS CLI administration interface, or from a UNIX client, run commands such as chmod, chown, and chgrp against the newly created Windows object. The following error is generated:

 NAS> chmod 775 users/garcias/TEST2
[DEBUG] mode: 0775
Vol1/TEST2: EPERM Operation not permitted

By default, Unix users are prevented from manipulating the CIFS security descriptor which means that the attributes of a Windows object cannot be changed using NFS.

However, this behavior is configurable, If the above acl protection is disabled, UNIX commands, such as chown, chgrp, and chmod are permitted. If the attributes of a Windows object are modified using NFS, the Windows security descriptor will be deleted and the object will become a Unix object.

• To disable acl protection on a NAS system running operating system 4.21 or newer, enter the following command at the CLI:

 fsctl acl protect off

In this case, no reboot is required.

• To disable acl protection on a NAS system running operating system 4.20 or older, enter the following commands at the CLI:

 set acl.overwrite.allowed
savevars

In this case, a reboot is required.

See the Sun StorageTek[TM] NAS OS Administration Guide for additional information regarding the default volume behavior, the Windows security descriptor and the acl.overwrite.allowed Environment Variable. If this is a customer system, be very careful to ensure that the deletion of acl information when modifying security from UNIX clients is acceptable to the customer.

This solution has no attachment