HP NetStorage 6000, Руководство пользователя

Страница: 105 / 192

Securing Data
UNIX Files Accessed by NT Clients
8-10
UNIX Files Accessed by NT Clients
When an NT user accesses a UNIX file, the UNIX file permissions are
translated into an ACL that then determines the permissions to grant.
Recall from “HP NetStorage 6000 Security in a UNIX-only Environment”
on page 8-1 that permissions are granted to three distinct groups:
n
user
n
group
n
other
If the owner of the UNIX file does not map to a user in the NT domain, then
an NT user ID is generated in the local UNIX domain. If the owner of the
UNIX file is recognized (or mapped) as a known NT user, then the
appropriate information is exchanged so that the owner has the same
security privileges in NT as in UNIX. A similar process occurs for the
group identification and permissions. The Other field is mapped to the NT
Everyone account. The table below shows the mapping that takes place
between the permissions in UNIX and NT.
Note If the UNIX file is modified by an NT client, then the file becomes an NT
file.
UNIX NT Equivalent
r-- Read
-w- Write, Delete
--x Execute
-wx Write, Delete, Execute
r-x Read, Execute
rw- Read, Write, Delete
rwx Full Access
--- No Access