10400455-002
©2008-14 Overland Storage, Inc.
247
Appendix B
Security and Access
This appendix provides additional information and configuration options about securing and
accessing shares and files on the SnapScale. The RAINcloudOS supports share-, file-, and
directory-level permissions for all local and Windows domain users and groups.
File and directory security can be configured using either Windows NTFS-style security or
classic Unix-style security. The type of security present on a file or directory is its
security
personalit
y.
Files and directories are stored on the cluster on volumes (or the directories underneath) with
a configured
security model
. The security model on the volume governs the permitted security
personalities, the default personalities, and the ability to change personalities on child files
and directories.
The default security model on newly-created volumes is always Windows/Unix. It can be
changed to either a Windows or Unix security model.
Topics in Shares and File Access:
•
•
•
•
•
Security Model Rules
Files and directories created inside security models acquire the security personality and
permissions according to the rules of the chosen security model.
Windows/Unix Security Model:
•
Files and directories created by SMB clients will have the Windows security personality.
Permissions will either be inherited according to the ACL of the parent directory (if
Windows) or will receive a default ACL that grants the user full access only (if the
parent is Unix or has no inheritable permissions).
•
Files and directories created by non-SMB clients will have the Unix personality. Unix
permissions will be as set by the client (per the user’s local umask on the client).
•
The security personality of a file or directory can be changed by any user with sufficient
rights to change permissions or ownership. If a client of one security personality changes
permissions or ownership of a file or directory of a different personality, the personality
will change to match the personality of the client protocol (for example, if an NFS client
changes Unix permissions on a Windows file, the file will change to the Unix
personality).
Windows Security Model:
