HP NetStorage 6000, Руководство пользователя

Страница: 99 / 192

Securing Data
HP NetStorage 6000 Security in an NT-only Environment
8-4
Additional information about the format of this file, as well as detailed
examples may be found in “Edit Host Access” on page 4-15.
The file is searched sequentially for a match. Once an entry is found that
matches the host and the resource to restrict, all other entries are ignored.
HP NetStorage 6000 Security in an NT-only Environment
On Microsoft Windows, the protocol used to transfer files over the network
between a server and a client is known as Server Message Block (SMB), or
Common Internet File System (CIFS). Many variations of the protocol
exist which reflect the myriad flavors of Windows on the Market; Windows
95/98, Windows NT, and Windows 2000.
Given all these variations, there are two distinct mechanisms used in CIFS
to provide security for resources. They are known as Share-Level Security
and User-Level Security. The HP NetStorage 6000 supports both of these
security modes. The next two sections briefly explain the architecture of
these security modes, and highlight any special considerations that should
be noted for the HP NetStorage 6000.
Field Description
class This field specifies the class of object to protect. In all cases
the object is files.
specifier This field specifies the resources on the NetStorage 6000
server to protect. For example,
/engineering
, applies to all
files and directories in the
/engineering
file system.
host
pattern This field has the name of a host or group of hosts that have
access rights. Host names must be resolvable through the
local
/etc/hosts
file, the NIS hosts file, or through DNS.
Groups of hosts are specified in the
/etc/hostgrps
file. If
the host pattern is the name of a group, then it must be
preceded by the @ symbol. The wildcard character ( * ) may
be used to specify all hosts.
rights This field specifies the access limits to apply. The entry in this
field can be one of the following:
•
access=rw allows read and write access to the resources
•
access=ro allows read only access to the resources
•
access=none denies all access to the resource