Qtree security styles

Types of security styles

There are three kinds of security styles, described briefly in the following table.

Style Behavior
NTFS Exactly like Windows NT NTFS: Files and directories have Windows NT file-level permission settings.

Note: To use NTFS security, make sure that the filer is licensed for CIFS.

UNIX Exactly like UNIX: Files and directories have UNIX permissions.
mixed Both NTFS and UNIX security are allowed: a file or directory can have either Windows NT permissions or UNIX permissions.

Qtree security styles in detail

The following table describes the security styles in detail and the effects of changing to each style.

.
Security style Description Effect of changing to the style
NTFS User access is determined as follows:
CIFS requests
Windows NT permissions determine user access if Windows NT permissions have been set on a file.
NFS requests
Windows NT permissions and a mapped CIFS identity determine access. UNIX groups are not used in the mapping from a UNIX identity to a CIFS identity\.

Note: You cannot change permissions in an NTFS qtree from a UNIX client.

 Windows NT permissions determine file access for a file that had them if the change is from a mixed qtree. Otherwise, UNIX-style permission bits determine file access for files created before the change.
UNIX User access depends on the protocol, as follows:
CIFS requests
Windows users are mapped to a UNIX UID and UNIX permissions determine access. In a UNIX qtree, a user cannot set Windows NT permissions. A Windows user can change UNIX permissions from Windows using SecureShare Access, as described in "Sending a message to all users on a filer."
NFS requests
Only the user's UID, GID, and UNIX-style permission bits of the file or directory determine user access. 		The filer disregards any Windows NT permissions established previously.
mixed Both NTFS and UNIX style permissions are permitted. The security style of a file is the style most recently used to set permissions on that file. See the information in "NTFS."

Caution: Changing NTFS permissions on a file recomputes UNIX permissions on that file.

Changing UNIX permissions or ownership on a file deletes any NTFS permissions on that file.

 None.

Copyright © 1999, Network Appliance, Inc. All rights reserved.

Part No. 210-02334
File: qtree2.htm
Last updated: 02/24/99 12:16:56