HP StorageWorks 8000, Руководство пользователя

Страница: 36 / 268

HP NAS 8000 Concepts
36 HP StorageWorks NAS 8000 User’s Guide
About HP NAS Server Security
Two basic ways to ensure the security of the NAS server are to:
■
Control access to the device and its files through user authentication and file
permissions.
■
Set an administrative password to ensure that only authorized users gain
access to key administrative functions
Note: The administrative password is also used for the Insight Manager tool, which lets
you view specific information about the NAS server hardware.
Access and rights to the data that clients store on the NAS server can involve
security in the Windows and UNIX environments. This section discusses key
security elements that you might consider when administering your NAS server.
HP NAS Server Security in a UNIX-only Environment
UNIX uses a reasonably simple approach to data access security. Each
workstation performs user authentication locally. Each user is associated with a
16-bit integer (user ID or UID). Also, each user can be a part of a group that is
denoted by another 16-bit integer (group ID or GID). A user can be a member of
several groups, each with its own unique GID. All objects contain associated
meta-data that includes the UID and GID as well as read/write/execute
permissions for the object. A typical UNIX file permission might look like the
following.
-rwxr-xr-x 1 201 5 611 Nov 11 11:09 testfile
-rwxr-xr-x 1 Wilson Engineering 611 Nov 11 11:09 testfile
In the first line, numbers represent the UID and GID; in the second line, the names
associated with the UID and GID are displayed. In either case, Wilson (UID 201),
who is a member of the Engineering group (GID 5), created a file that has
permissions for three different groups. The permissions are represented by a string
of nine characters: three characters for the permissions of each of the three groups
of users. The three groups are the owner (Wilson), the group (Engineering), and
other. In the example above, the owner has specified:
■
rwx (read/write/execute) privileges for himself
■
r-x (read/execute) privileges for the group
■
r-x (read/execute) privileges for other