Sun Microsystems 5310 NAS Server User Manual


 
2-54 Sun StorEdge 5310 NAS Troubleshooting Guide December 2004
Listed next are Creation time, FS Creation time, and FS mtime. These are timestamps
associated with the file and the filesystem, generally only useful for troubleshooting
timestamp issues.
Next is the Windows security descriptor. In its simplest form, it will read “No
security descriptor”. This means that no Windows security is present, and that
Windows will simulate security based on the above NFS permissions.
If a Windows security descriptor is present, the following information is displayed:
Security Descriptor:The type of security descriptor. This can be disregarded.
Owner:The user name or SID of the owner.
Primary Group: The group name or SID of the group owner.
Discretionary Access Control List (DACL):A list of users who have access to the
file, by SID.
A SID is a number that uniquely identifies a user or group. The data to the right of
the final dash identifies the user within the domain; the rest of the number indicates
domain and type of account information. This user information is known as the RID
(relative ID). The RID is the number used for user mapping. It can be cross-
referenced with the StorEdge user or group mapping data determine the user/group
name and NFS UID/GID.
From there, it is simply a matter of assigning appropriate rights to the user
attempting to access the directory. Set security as desired using a Windows Domain
Admin account.
Windows anti-virus, backup or file management software runs
endlessly, following symbolic links.
By default, StorEdge follows symbolic links in Windows. Windows cannot
differentiate between links and standard files. Therefore, if a symbolic link points to
a location in the filesystem above its own location, Windows applications can get
stuck in a loop following these links.
To correct this behavior, you can either manually exclude such links from the scan or
backup, or you can set a variable to disable the following of symbolic links from
CIFS/SMB clients. The variable affects all volumes and all CIFS/SMB clients.
This functionality is only available at the StorEdge CLI (command line interface).
1. To access the StorEdge CLI, connect to the StorEdge via Telnet, and type “admin”
at the [menu] prompt and enter the administrator password.
2. At the CLI, enter set smb.dir_symlink.disable yes