User manual HP STORAGEWORKS 9000S NAS NAS 4000S AND 9000S ADMINISTRATION GUIDE

[. . . ] Administration Guide hp StorageWorks NAS 4000s and 9000s First Edition (November 2003) Part Number: 352405-001 This guide provides information on performing the administrative tasks necessary to manage the HP StorageWorks NAS 4000s or 9000s server. Overview information as well as procedural instructions are included in this guide. © Copyright 2003 Hewlett-Packard Development Company, L. P. Hewlett-Packard Company makes no warranty of any kind with regard to this material, including, but not limited to, the implied warranties of merchantability and fitness for a particular purpose. Hewlett-Packard shall not be liable for errors contained herein or for incidental or consequential damages in connection with the furnishing, performance, or use of this material. [. . . ] By keeping the number of shares and other resources low, the performance of the NAS server is optimized. For example, instead of sharing out each individual user's home directory as its own share, share out the top level directory and let the users map personal drives to their own subdirectory. Defining Access Control Lists The Access Control List (ACL) contains the information that dictates which users and groups have access to a share, as well as the type of access that is permitted. Each share on an NTFS file system has one ACL with multiple associated user permissions. For example, an ACL can define that User1 has read and write access to a share, User2 has read only access, and User3 has no access to the share. The ACL also includes group access information that applies to every user in a configured group. ACLs are also referred to as permissions. 134 NAS 4000s and 9000s Administration Guide Folder, Printer, and Share Management Integrating Local File System Security into Windows Domain Environments ACLs include properties specific to users and groups from a particular workgroup server or domain environment. In a multidomain environment, user and group permissions from several domains can apply to files stored on the same device. Users and groups local to the NAS server can be given access permissions to shares managed by the device. The domain name of the NAS server supplies the context in which the user or group is understood. Permission configuration depends on the network and domain infrastructure where the server resides. File-sharing protocols (except NFS) supply a user and group context for all connections over the network. (NFS supplies a machine based context. ) When new files are created by those users or machines, the appropriate ACLs are applied. Configuration tools provide the ability to share permissions out to clients. These shared permissions are propagated into a file system ACL and when new files are created over the network, the user creating the file becomes the file owner. In cases where a specific subdirectory of a share has different permissions from the share itself, the NTFS permissions on the subdirectory apply instead. This method results in a hierarchical security model where the network protocol permissions and the file permissions work together to provide appropriate security for shares on the device. Note: Share permissions and file level permissions are implemented separately. It is possible for files on a file system to have different permissions from those applied to a share. When this situation occurs, the file level permissions override the share permissions. Comparing Administrative (Hidden) and Standard Shares CIFS supports both administrative shares and standard shares. Administrative shares are shares with a last character of $. Administrative shares are not included in the list of shares when a client browses for available shares on a CIFS server. Standard shares are shares that do not end in a $ character. Standard shares are listed whenever a CIFS client browses for available shares on a CIFS server. [. . . ] At the Integrated Lights-Out Account Login screen, supply the username and password for the iLO and click Login. The Remote Console Information screen is displayed. Click the Remote Console choice in the menu on the left side of the screen. Press Ctrl-Alt-Del to log in to the console. [. . . ]