beautypg.com

Default purge security, Retaining source security – HP NonStop G-Series User Manual

Page 43

background image

One-time Synchronization

HP AutoSYNC User’s Guide522580-016

3-5

Ownership and Security

Default PURGE Security

To be replaced by AutoSYNC, existing destination files must be secured for purge
access. If the destination is on a remote system, the files must be secured for remote
purge access.

Note that the recommended method to prevent the synchronization of a file is to list the
file in the exclude file using the EXCLUDE option. However, you can also avoid
synchronizing a destination file by setting PURGE security of the destination file to“-”.

Once you have synchronized a file that is owned by another user ID, you cannot
resynchronize that file unless you have purge access to it. Therefore, PURGE security
is automatically set to allow you to replace the file with a new version.

Setting the PURGE security of the destination file overrides the SECURE option as
follows:

Note that although additional users can purge the file, they cannot access or update
the data in the file.

To avoid setting the purge security to “A” or “N”, you can do one of the following:
transfer only files belonging to the user or group; change the ownership of the files with
the OWNER option; or perform the synchronization under a group manager (n, 255)
user ID.

Retaining Source Security

To retain the security of the source file on the destination system, including PURGE
security, use the KEEPSECURITY option. If KEEPSECURITY is specified, AutoSYNC
does not change the security string of the destination file and it remains the same as
the source file.

If the user chooses to preserve security attributes on the destination system,
subsequent synchronizations could fail. For example a PURGE security of “O”
preserved on the destination system will prevent further synchronizations because the
file can only be replaced by the local (destination) owner of the file. It is possible to
avoid this problem by configuring the sync process on the destination to run as the
local user. See

Preserving Security Attributes on the Destination

on page 3-18 for

details.

KEEPSECURITY overrides the SECURE and NETWORKSECURE options.

User vs. File

Owner

Local destination

Remote destination

Same user

“O”

“U”

Same group

“G”

“C”

Different group

“A”

“N”

This manual is related to the following products: