1. NAS with PDC/AD will still only support the RWX - Read Write Execute permission - POSIX limitation. There is no workaround this Samba POSIX limitation.
2. If u really need 2 use the NTFS permission; create an iSCSI target and mount it to your Windows Server 2000/2003 thru an iSCSI initiator.
3. Create a share folder with share permission of read and change for users.
4. Thereafter, define NTFS permission for sub-folders by choosing to inherit or not to inherit them from the top-level folders.
5. If you are planning on migrating from an NTFS drive on your Windows server to the iSCSI volume; download the Microsoft Resource Kit for Windows Server.
6. Use the ROBOCOPY.exe to effectively copy all the permission from local source folder into the iSCSI volume. This will not copy share permission; only NTFS permissions.
7. All you need to do after verifying the copy process is to compare the file/folder size/numbers.
8. Recreate some of the share permissions which should be a piece of cake by copying the former.
9. Unshare the source folder and recreate the same name; after that tell users they are ready to access the files on the larger NTFS volumes on Server 2003
While I'm on this point, I like the idea of using a NFS head versus DSS. The reason is because you can have incredible redundancy via Heartbeat2, DRBD and multipathd.
Two SLES10 SP1 servers with the latest fuse and ntfsprogs from opensuse.org. Heartbeat2 and NFS backed by Open-E. What more can you ask for?!
We are having the same problem with the posix > windows limitations
It pretty much makes our DSS server useless for NAS SMB mounts
There are some shares that i want to publish using NAS and iscsi is not an option becuase we seperate iscsi traffic on a seperate switch the servers attached to iscsi are not an option for me to do file shares. Also we use iscsi for high throughput applications only.
For simple file shares ie word/excel docs i cant use the NAS function because the permissions just dont suit a windows environment.
Also why should i have to populate all my shares through iscsi for windows permissions to work when i bought a all in one solution that should let me use all the functions.
according to the feature list of DSS V6
Windows Active Directory / Primary Domain Controller Support
Open-E DSS V6 supports Windows Active Directory (AD), Primary Domain Controller (PDC), Lightweight Directory Access Protocol (LDAP) and AD & NIS User-/Group ID synchronization to leverage information about users, groups, systems and other resources stored in the Active Directory. The support of Access Control List (ACL) ensures that access rights of users are automatically taken over from the Domain.
Supported Network Clients and Network File Protocol
Open-E DSS V6 supports the file based protocols CIFS (Common Internet File System)/SMB, NFS (Network File System), FTP (File Transfer Protocol), FTPS and Apple Talk enabling Windows, Linux, Unix and Macintosh clients to share data on the same server.
Our limited experience with DSS as NAS in a Windows environment with a large AD has followed a similar path - struggled with it for a while then gave in & used Windows server/s as the NAS. The posix rights was sort of ok (just), but system hardware instability meant the link between user accounts & directory rights got confused more than once, & meant some stressful work to correct! There is now the ability to back & restore this mapping, and quotas too, but I'm not that confident. In simpler situations (simpler rights) I think the NAS function is just fine.
Reply With Quote
