napp-it ZFS Storage, Руководство пользователя

Страница: 51 / 63

24.2 Complete extension (not working on Linux)
If you want to unlock all Pro features from all extensions you can use the Napp-it Pro complete edition.
Complete adds Appliance menus like Appliance Maps, Appliance Security and Appliance Tuning.
Complete additionally adds email support for setup problems but only for regular commercial licenses.
24.3 ACL and user management extension (Solarish only) includes
- File and Folder ACL settings via Web-GUI
- Care about order of ACL settings (not possible from Windows)
- Allow deny rules (not possible from Windows)
- Share based ACL settings (Permissions on a share itself, not on files or folders)
- Trivial ACL (similar to unix permissions) like owner@, group@ and everyone@
- Control of ACL order (Solaris ACL are order sensitive; Windows cares first about deny then about allow rules)
- Control of ACL inheritance for newly created files and folders
- Local user and groups
- Active Directory user and groups
- human readable ACL set names like
full_set, modify_set, read_set, create_fileset, create_folderset, owner_default, etc
- Control of ACL-inherit and ACL-mode property
- reset all ACL (recursively) to defaults like modify, roor only, owner only, etc
You can modify permissions and permission related ZFS properties in menu ZFS filesystems under Folder-ACL.
Below current permissions and settings you find the controls to modify settings. A resest ACL to everyone@
recursively is available even in the napp-it Free edition.
- User-Quota, Group-Quota settings via Web-UI (napp-it menu ZFS filesystem -> used)
- IDmappings via Web-UI (Menu user)
- Restore all napp-it, user, smbgroup and idmapping settings from backup job data
(Menu user - restore settings)
Without the extension, you can control file permissions either from console via /usr/bin/chmod or via Windows
when you connect a share as root. The main restriction from Windows is that Windows processes all deny rules
prior allow rules while Solarish respects the order of rules. If you need deny rules, you should set them on
Solarish. The other restriction is that you can remove admin permissions on Windows with the result that an
admin has no access unless he or she modifies permissions. On Solarish, root has always access even without a
dedicated ACL rule. This makes recursive modifications like reset ACL easier.
24.4 Monitor extension (Solarish only) includes
Realtime monitoring can be enabled/disabled with toplevel menu „mon“ nearby logout
- Realtime monitoring of important system parameters via websocket (status lights)
- Shortterm monitoring (last 60s) of cpu%, w%, b% and iops/s of reads, writes and waits
- Longterm monitoring (next release)
- Realtime Update of pages (2 Min after last access)
- Monitoring of LSI SAS2 slots (ZFS WWN disk-id to physical slot mapping)
- Editing features (menus, actions and translations)
- Logs and hashed with internal infos and return values of napp-it commands on a page load
- Health-Status for multiple napp-it appliances (with status lights) via netscan or on appliance groups
- Vnic, Vlan and Link-Aggregation settings
- Disk, SAS2 Bays and Smartvalues are discovered in the background and buffered > 1h to increase GUI
performance
- Bridge Management in Menu System > Network Eth (2016.05dev up): Use OmniOS like a 1/10 G switch