Sun Storage 7000 Unified Storage System: Windows users lack write permissions to files which have had permissions written via NFSv3

Asset ID:	1-72-1428783.1
Update Date:	2012-06-28
Keywords:

Solution Type Problem Resolution Sure

Solution 1428783.1 : Sun Storage 7000 Unified Storage System: Windows users lack write permissions to files which have had permissions written via NFSv3

Applies to:

Sun ZFS Storage 7420 - Version Not Applicable to Not Applicable [Release N/A]
Sun Storage 7310 Unified Storage System - Version Not Applicable to Not Applicable [Release N/A]
Sun ZFS Storage 7120 - Version Not Applicable to Not Applicable [Release N/A]
Sun ZFS Storage 7320 - Version Not Applicable to Not Applicable [Release N/A]
Sun Storage 7110 Unified Storage System - Version Not Applicable to Not Applicable [Release N/A]
7000 Appliance OS (Fishworks)

Symptoms

NFS written files using traditional (mode) permissions granting read/write access to group or world don't allow writes from Windows.

To discuss this information further with Oracle experts and industry peers, we encourage you to review, join or start a discussion in the My Oracle Support Community - 7000 Series ZFS Appliances

Cause

This issue is caused by an incompatibility in a older version of the operating system. The translation of the write bits in the traditional permissions set the write bit in the ACL, but did not set the write attribute and write extended attribute bits, rendering the file effectively read-only. The owner of the file (if mapped to the Windows user) could write to the file without issue.

Solution

Note: This document assumes that you are running software version 2010.8.17.4.0 or later. There are a number of important ACL and permission-related enhancements in this version and it is STRONGLY recommended that you upgrade to at least this version in order to successfully share files between UNIX and Windows.

This issue is corrected in system software version 2010.8.17.4.0. However, files written on earlier versions will still exhibit this issue. The easy way to correct this is to apply the desired permissions from a UNIX client. This will cause the permissions, and the ACL, to be written correctly and resolve the issue.

This is what the permissions look like from a root-mounted Solaris system before and after the fix:

BEFORE (2010.Q3.1.0 - 2010.Q3.3.1)



nas1# chmod 777 ntlm.cap

nas1# ls -V ntlm.cap

-rwxrwxrwx 1 root root 19256 Aug 2 21:33 ntlm.cap

owner@:rwxp--a-R-cCos:-------:allow

group@:rwxp--a-R-c--s:-------:allow

everyone@:rwxp--a-R-c--s:-------:allow



nas1# chmod 777 test 

nas1# ls -Vd test

drwxrwxrwx 2 root root 2 Aug 23 10:24 test

owner@:rwxp--a-R-cCos:-------:allow

group@:rwxp--a-R-c--s:-------:allow

everyone@:rwxp—a-R-c--s:-------:allow



AFTER (2010.Q3.4.0 - ??)



nas1# chmod 777 ntlm.cap

nas1# ls -V ntlm.cap

-rwxrwxrwx 1 root root 19256 Aug 2 21:33 ntlm.cap

owner@:rwxp--aARWcCos:-------:allow

group@:rwxp--aARWc--s:-------:allow

everyone@:rwxp--aARWc--s:-------:allow



nas1# mkdir test

nas1# chmod 777 test 

nas1# ls -Vd test

drwxrwxrwx 2 root root 2 Aug 23 10:24 test

owner@:rwxp-DaARWcCos:-------:allow

group@:rwxp-DaARWc--s:-------:allow

everyone@:rwxp-DaARWc--s:-------:allow

Note the addition of the D, A and W bits to the group@ and everyone@ access control entries in the second example.

Back to <Document 1428753.1> Sun Storage 7000 Unified Storage System: How to Troubleshoot Identity Mapping and cross-platform file sharing issues.

References

<NOTE:1428753.1> - Sun Storage 7000 Unified Storage System: How to Troubleshoot Identity Mapping and cross-platform file sharing issues

Attachments

This solution has no attachment