Secondly, changes to the members and owners attributes of the group result in changes to
the trustee assignments on the file system associated with the group.
Dynamic trustee assignments are controlled using objects with special NDS common
names for
group
,
member
, and
owner
. When setting up the trustee assignments on the
template, the name of the container holding the specially named objects does not matter.
If the common name of the object is “-group-”, “-member-”, or “-owner-”, then the
substitution will take place when applied to the group disk space.
The actions taken by File System Factory™ for each assignment based on a special name
common name (CN) are described in the table below:
Object CN
Action
Applied
-group-
The group object is given the
specified trustee assignment to
the given file or directory.
At initial creation of the
file system for the group.
-member-
The specific group member is
given the specified trustee
assignment to the given file or
directory.
When a member is added
to the group, the user
object of the member is
given the trustee
assignment. When the
member is removed, the
assignment to the file space
is removed.
-owner-
The specific group owner is
given the specified trustee
assignment to the given file or
directory.
When an owner is added to
the group, the user object
of the owner is given the
trustee assignment. When
the owner is removed, the
assignment to the file space
is removed.
Let’s look at some examples of both static and dynamic trustee assignment in action.
Examples
Example 1: Educational
For this example, we will use the educational template
sample
below:
Novell File System Factory™ Administrator’s Guide
© 2002-2005 Condrey Consulting Corporation. All Rights Reserved.
69