Qtree file access models

Kinds of file access models

You can use the following four file access models in working with qtrees:

• CIFS user accessing a file with Windows NT security
• CIFS user accessing a file with UNIX security
• NFS user accessing a file with Windows NT security
• NFS user accessing a file with UNIX security

CIFS access to Windows files

CIFS accesses to Windows files obey Windows security rules.

CIFS access to UNIX files

The following principles apply to accessing UNIX files from CIFS:

• All CIFS users are mapped to UNIX UIDs and GIDs.
• File accesses use UNIX security or PC security, as chosen during the cifs setup program.
  • UNIX-style permissions are determined by the rights associated with the UNIX UID and GID.
  • PC-style permissions are determined by the rights assigned in a share's Access Control List (ACL) and are limited by the UNIX permissions assigned to a file.
• PC security is like FAT (File Allocation Table) file system security with per-file permissions:
  • If the owner of a file or directory accesses an item, the owner permissions are checked to see whether they allow access.
  • If someone other than the owner of a file or directory accesses an item, the group permissions are checked to see whether they allow access.

NFS access to Windows files

The following principles apply to accessing Windows files from NFS:

• Windows NT permissions are mapped to UNIX permissions.
• Each Windows NT user who sets Windows NT permissions is mapped to a UNIX user and UNIX group, except that if the owner is a generic user, the owner is mapped to root with restrictions.
• Windows NT permissions for Owner are mapped to UNIX owner permissions.
• Windows NT permissions for Everyone are mapped to UNIX Group and UNIX Other permissions.

NFS access to UNIX files

NFS accesses to UNIX files obey UNIX security rules.

Copyright © 1999, Network Appliance, Inc. All rights reserved.

Part No. 210-02334
File: qtree3.htm
Last updated: 02/24/99 12:16:56