10400455-002
©2008-14 Overland Storage, Inc.
248
SnapScale/RAINcloudOS 4.1 Administrator’s Guide
B - Security and Access
•
All files and directories will have the Windows security personality. Permissions will be
inherited according to the ACL of the parent directory.
•
The permissions of a file or directory can be changed by any Windows SMB user with
sufficient rights to change permissions or ownership. Permissions cannot be changed by
NFS or FTP clients.
•
The personality of files and directories cannot be changed on a Windows security model.
All files and directories always have the Windows personality with a Windows ACL.
Standard Unix permissions will appear as 777 (rwxrwxrwx), but only the permissions in
the Windows ACL will be enforced.
Unix Security Model:
•
Files and directories created by non-SMB clients will have the Unix personality. Unix
permissions will be as set by the client (per the user’s local umask on the client).
•
Files and directories created by SMB clients will have the Unix personality. Unix
permissions will be set to a default.
•
The personality of files and directories cannot be changed on a Unix security model. All
files and directories always have the Unix personality.
Security Model Management
Changes to a security model can optionally be propagated with the corresponding personality
and default permission to all files and directories underneath the security model.
When
setting
the security model, only a single security model can be set on the entire volume
at the root level but not the directories immediately underneath the volume as they inherit the
security model from the top level.
When
changing
the security model:
•
If changing from Windows to Unix, all files and directories will be changed to be owned
by
admin
and
admingrp
, with Unix permissions of 777(rwxrwxrwx).
•
If changing from Unix to Windows, files and directories will be changed to default
permissions that allow all users the ability to create and manage their own files and
directories and to access other users’ files and directories.
Special Share Options
The basic setup and configuration of shares on a SnapScale cluster is handled on the
Security
> Shares
page. This section covers more details about the special options and features of share
security in these subsections:
•
•
•
