Axis StorPoint HD, Руководство пользователя

Страница: 59 / 95

Section 6: Security Management
AXIS StorPoint HD 58 User’s Manual
StorPoint HD Access Rights
The AXIS StorPoint HD offers the possibility to restrict user access to
connected Jaz drives and individual Jaz disks, as well as to the
StorPoint HD configuration files. It is also possible to limit the
number of users simultaneously accessing any Jaz disk in order to
comply with licensing agreements.
Access restrictions are set individually for the protocol SMB via
separate settings in the access files. The default settings in the SMB
protocol give full access rights to all users, so we recommend that you
implement at least two access restrictions:
• Protect the server configuration by restricting access to the config
and volumes directories. Details given in this section will assist you
with operation.
• Disable all protocols not being used. If unconfigured protocols are
not disabled, any user accessing the server through such a protocol
will be given full access rights, even if a tight security scheme has
been setup in other protocols. To disable unused protocols you
will need to set the appropriate StorPoint configuration
parameters - refer to “
StorPoint HD Configuration ” on page 47.
Note:
❏
No comments are allowed in the pseudo files.
The Access Control
Parameters
There are separate access files for each of the Jaz drives (SCSI), the Jaz
disks (Jazdisk) inserted into the drives, and the files held in the
StorPoint HD (Server). To change the access rights to any of these
volumes, you need to change the parameter values in the
corresponding access files held in the StorPoint HD.
The following list describes the parameters held in the access files. Not
all of these access parameters are used in every access file. See page 57
for the three methods of changing the access rights held in these files.
Jaz Disks
(Jazdisk folder)
This folder contains the access right information for all inserted Jaz
disks. If the disk is removed the access rights file is retained, and used
to identify the disk when it is inserted into another drive.