Novell OPEN ENTERPRISE SERVER 2 SP2 - ADMINISTRATION, Руководство по внедрению, Страница: 166 / 288

166 OES 2 SP2: Planning and Implementation Guide
n
ov
do
cx (e
n)
22
Ju
n
e 20
09
The Traditional Novell Access Control Model
NetWare is known for its rich access control. OES makes these controls available on Linux through
NSS volume support. In addition, some of the controls are available on Linux POSIX file systems
through NCP volume creation. NCP volumes are limited because Linux POSIX systems offer only a
subset of the directory and file attributes that NSS offers.
In the Novell access control model, eDirectory objects, such as users and groups, are assigned File
System Trustee Rights to directories and files on NSS and NCP volumes. These trustee rights
determine what the user or group can do with a directory or file, provided that the directory or file
attributes allow the action.
This is illustrated in Figure 16-2 .
Figure 16-2
Directory and File Access under the NetWare Access Control Model
Table 16-2 explains the effective access rights illustrated in Figure 16-2 .
Security Equivalence in
eDirectory The concept of Security
Equivalence in eDirectory. “ eDirectory Objects and Security
Equivalence ” in the OES 2 SP2:
File Systems Management Guide
Feature To Understand See
File1
File System
Trustee Rights
eDirectory Objects Directories and Files
Directory and File
Attributes
File2
DirectoryA
Nancy
Joe
Reporters
DirectoryA
DirectoryA
Nancy
Joe
Reporters
Supervisor
Di (Delete Inhibit)
Ri (Rename Inhibit)
Read
File Scan
Bert
Bert
File1
File1
Nancy
Joe
Reporters
N (Normal)
Read
Access Control
Bert
File2
File2
Nancy
Joe
Reporters
Ro (Read Only)
Bert
Access Control