DSS as a Windows NAS

[amscanada]

I have been playing with Open-E as a NAS but we run a Windows Enviroment and I can't get the file/folder security premissions to work for me. When I try to set only modify or write access to a file or folder it defaults to Full Control, it looks like I can set Read or Full control but not really anything in the middle. Is this a limitation of SAMBA or how Open-E is using SAMBA?

[To-M]

Try setting the security permissions on the share from the Windows server (login as with admin rights) also check the ACL settings in the NAS Resources.

[duder1]

I've had no luck on this either. Good luck, please post your fix if it works right.

[amscanada]

Yeah at this time we present an iSCSI lun to our windows file server and use the NAS part of DSS as a Disk based backup location.
No matter what I have tried I can not get the ACLS to work correctly with windows.

[cre8tif]

it is samba limitation; there are only 3 known rights ... read / write / execute based on user|group|others-everyone.

; in order to utilize all the 13 NTFS permissions; either mount an iSCSI LUN to the server so that it is formatted to NTFS block device or share from a Windows server and define the ACL from the server and then mapped users to the folders.

Good luck.

[amscanada]

Thank you that is what I was looking for.

[ottl05]

it is samba limitation; there are only 3 known rights ... read / write / execute based on user|group|others-everyone.

; in order to utilize all the 13 NTFS permissions; either mount an iSCSI LUN to the server so that it is formatted to NTFS block device or share from a Windows server and define the ACL from the server and then mapped users to the folders.

Good luck.

we´ve got now our DSS and I´m playing with it and testing it.
the iSCSI function works perfect and now I´m on the NAS side and have the same problems with the permissons.

what do you mean with "share from a Windows server"?
how could I share the NAS voulume from windows?

[derochat]

I'm working in a university which has an Active Directory with 12'000 entries. The ACL (Access control list) form shows all users and groups in a 20 lines window with only up and down arrows to find and select entries among the 12’000 entries. It’s really like looking for a needle in a haystack! This form could greatly be improved by providing a search tool.

Permissions given to a folder using ACL are propagated from the OpenE server to Windows. If you change permissions to a folder on the Windows computer which is using the share, the change is not propagated back to the OpenE server (or taken into account by it) and it is like if nothing was done.

Another weird thing with this interface is that you are automatically propagated to the root of the filesystem each time you apply a new permission to a folder bellow. You have then to go down the filesystem to make another change. Imagine doing this for more than 10 users!

[Gr-R]

I'm working in a university which has an Active Directory with 12'000 entries. The ACL (Access control list) form shows all users and groups in a 20 lines window with only up and down arrows to find and select entries among the 12’000 entries. It’s really like looking for a needle in a haystack! This form could greatly be improved by providing a search tool.

We are aware of the issue this presents with a lot of users, and are working on something in the area for a future release.

Permissions given to a folder using ACL are propagated from the OpenE server to Windows. If you change permissions to a folder on the Windows computer which is using the share, the change is not propagated back to the OpenE server (or taken into account by it) and it is like if nothing was done.

DSS is a linux based OS, so it will not operate as if it is a windows controller. To get the behavior you are describing, use a connection to the PDC, or ADS.

Another weird thing with this interface is that you are automatically propagated to the root of the filesystem each time you apply a new permission to a folder bellow. You have then to go down the filesystem to make another change. Imagine doing this for more than 10 users!

Again, this can be managed if using PDC, or ADS. You can also try changed the inherit permissions options.

hope this helps.

[broadband]

Unable to get the back-up and recovery...not even my friend can solve this!!