Adaptec 5325301656 Administration Guide - Page 100

ID Mapping Function SnapTree File System Permissions Toggling Security Models Mixing SnapTrees Description Security model and permissions differ according to the method used to create the SnapTree directory: • From the client: If SMB, permissions will either be according to ACL inheritance (if the parent volume root directory has the Windows security model) or Full Access to the owning user only. Permissions for directories created by all other protocols will be set by the client (per the client's umask). • From the Administration Tool: If created in a UNIX volume, permissions will be 777 (rwx/wx/wx). If created in a Windows/Mixed volume, permissions will allow all users to create, delete, and change permissions on files created inside the SnapTree, and will grant full control to administrators. Changes to a SnapTree's security model can optionally be propagated to the corresponding personality with a default permission to all files and directories underneath the SnapTree. When changing the security model on a SnapTree: • If changing from Windows to UNIX, all files and directories will be changed to be owned by admin and admingrp, with UNIX permissions of 777(rwxrwxrwx). • If changing from UNIX to Windows, files and directories will be changed to default permissions that allow all users the ability to create and manage their own files and directories and to access other users' files and directories. You can create SnapTrees of different security models on the same volume. ID Mapping ID mapping allows users and groups that exist on Windows domains to share user IDs with local or NIS users and groups. This results in the same permissions and quota consumption applying to both the Windows domain user and the local or NIS user. Example: John Smith is a local user on a Snap Server, as well as having a user ID on a Windows domain. John's quota for the Snap Server has been set to 200 MB. The administrator of the Snap Server maps the Windows domain user identification for John Smith to the local identification for John Smith, giving both IDs access to John's 200 MB. Note Search filters without wildcards will search for all entries containing the string you enter in the search field rather than looking for exact matches. For 86 Snap Server Administrator Guide