メインコンテンツまでスキップ

UNIXセキュリティ形式のボリュームのSACLを編集することはできません

Views:
19
Visibility:
Public
Votes:
0
Category:
ontap-9
Specialty:
nas<a>SACL</a><a>UNIXセキュリティ形式</a><a>UNIXセキュリティ形式SACL</a>
Last Updated:

環境

  • ONTAP 9
  • 監査

問題

使用する方法に関係なく、ボリュームではSACLエントリが許可されていないようです。

Windowsエクスプローラの例:

Active Directoryユーザ「nas-user」をUNIX形式のセキュリティボリューム「unix」に追加しようとしました。「nas-user」の権限を作成したら、「apply」をクリックします。その後、権限エントリから「nas-user」が削除されたことがわかります。

clipboard_e867d6b01f34d9ad9e56bcd3a99ceea61.png

clipboard_e7eaf0c9959b823f580ad634437bb9e92.png

ONTAP CLIの例:

cluster1::vserver security file-directory> ntfs sacl show -vserver svm1_cluster1 -ntfs-sd unix-sd 
Vserver: svm1_cluster1
NTFS Security Descriptor Name: unix-sd

    Account Name     Access   Access             Apply To
                     Type     Rights
    --------------   -------  -------            -----------
    DEMO\nas-user    success  full-control      this-folder, sub-folders, files

cluster1::vserver security file-directory> policy show -vserver svm1_cluster1   

   Vserver          Policy Name
    ------------     --------------
    svm1_cluster1    unix_test

cluster1::vserver security file-directory> task add -policy-name unix_test -path /unix/test -vserver svm1_cluster1 -security-type ntfs -ntfs-sd unix-sd
  (vserver security file-directory policy task add)

Error: command failed: Can't set ntfs security descriptor on a Unix File

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.