Dell DR4300 DR Series System Administrator Guide - Page 21

Windows Permissions Guidelines, Rapid NFS and Rapid CIFS

Page 21 highlights

• Execute (access that allows user to execute files or traverse directories in the filesystem) NOTE: A root user has all levels of permission access, and a user can be a member of a single group or of multiple groups (up to 32 groups are allowed in Unix). Windows Permissions Guidelines To enable Windows access, the DR Series system supports access control lists (ACLs) that contain zero or more access control entries (ACEs), and an empty ACE list grants all access requests. The Windows New Technology File System (NTFS) uses ACLs as part of the security descriptor (SD) process, which requires permissions to access such filesystem objects as files and directories. ACLs support two levels of users: • Owners • Groups Both Owners and Groups have Security IDs (SIDs) that define and identify an object owner or the group owning an object. ACEs in an ACL consist of a SID, a specific permission that either allows or denies access and also defines which of the following inheritance settings apply: • IO-inherit-only: not used for access checking. • OI-object inherit: new files get this ACE added. • CI-container inherit: new directories get this ACE added. Windows NTFS ACLs include the following read, write, append, execute, and delete permissions that allow users to: • Synchronize access • Read data or list the directory • Write data or add a file • Append data or add a folder • Read Extended Attributes (EAs) • Write EAs • Execute file or traverse folders • Delete child or delete folders • Delete a file The Owner user type has two default permissions: • Write discretionary ACL • Read control Rapid NFS and Rapid CIFS Rapid NFS and Rapid CIFS enable write operation acceleration on clients that use DR replication and NFS or CIFS file system protocols. Similar to OST and RDS, these accelerators allow for better coordination and integration between DR Series system backup, restore, and optimized deduplication operations with Data Management Applications (DMAs) such as CommVault, EMC Networker, and Tivoli Storage Manager. For the current list of qualified DMAs, see the Dell DR Series System Interoperability Guide. Rapid NFS is a new client file system type that ensures that only unique data is written to the DR Series system. It uses user space components and file system in user space (FUSE) to accomplish this. Metadata operations such as file creates and permission changes go through the standard NFS protocol, whereas write operations go through RDNFS. Rapid CIFS is a Windows-certified filter driver that also ensures that only unique data is written to the DR Series system. 21

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186

Execute (access that allows user to execute files or traverse directories in the filesystem)
NOTE:
A root user has all levels of permission access, and a user can be a member of a single group or of multiple
groups (up to 32 groups are allowed in Unix).
Windows Permissions Guidelines
To enable Windows access, the DR Series system supports access control lists (ACLs) that contain zero or more access
control entries (ACEs), and an empty ACE list grants all access requests. The Windows New Technology File System
(NTFS) uses ACLs as part of the security descriptor (SD) process, which requires permissions to access such filesystem
objects as files and directories. ACLs support two levels of users:
Owners
Groups
Both Owners and Groups have Security IDs (SIDs) that define and identify an object owner or the group owning an
object. ACEs in an ACL consist of a SID, a specific permission that either allows or denies access and also defines
which of the following inheritance settings apply:
IO—inherit-only: not used for access checking.
OI—object inherit: new files get this ACE added.
CI—container inherit: new directories get this ACE added.
Windows NTFS ACLs include the following read, write, append, execute, and delete permissions that allow users to:
Synchronize access
Read data or list the directory
Write data or add a file
Append data or add a folder
Read Extended Attributes (EAs)
Write EAs
Execute file or traverse folders
Delete child or delete folders
Delete a file
The Owner user type has two default permissions:
Write discretionary ACL
Read control
Rapid NFS and Rapid CIFS
Rapid NFS and Rapid CIFS enable write operation acceleration on clients that use DR replication and NFS or CIFS file
system protocols. Similar to OST and RDS, these accelerators allow for better coordination and integration between DR
Series system backup, restore, and optimized deduplication operations with Data Management Applications (DMAs)
such as CommVault, EMC Networker, and Tivoli Storage Manager. For the current list of qualified DMAs, see the
Dell DR
Series System Interoperability Guide
.
Rapid NFS is a new client file system type that ensures that only unique data is written to the DR Series system. It uses
user space components and file system in user space (FUSE) to accomplish this. Metadata operations such as file
creates and permission changes go through the standard NFS protocol, whereas write operations go through RDNFS.
Rapid CIFS is a Windows-certified filter driver that also ensures that only unique data is written to the DR Series system.
21