beautypg.com

Unix files accessed by nt clients – HP NetStorage 6000 User Manual

Page 105

background image

Securing Data

UNIX Files Accessed by NT Clients

8-10

UNIX Files Accessed by NT Clients

When an NT user accesses a UNIX file, the UNIX file permissions are
translated into an ACL that then determines the permissions to grant.
Recall from “HP NetStorage 6000 Security in a UNIX-only Environment”
on page 8-1 t
hat permissions are granted to three distinct groups:

n

user

n

group

n

other

If the owner of the UNIX file does not map to a user in the NT domain, then
an NT user ID is generated in the local UNIX domain. If the owner of the
UNIX file is recognized (or mapped) as a known NT user, then the
appropriate information is exchanged so that the owner has the same
security privileges in NT as in UNIX. A similar process occurs for the
group identification and permissions. The Other field is mapped to the NT
Everyone account. The table below shows the mapping that takes place
between the permissions in UNIX and NT.

Note

If the UNIX file is modified by an NT client, then the file becomes an NT
file.

UNIX

NT Equivalent

r--

Read

-w-

Write, Delete

--x

Execute

-wx

Write, Delete, Execute

r-x

Read, Execute

rw-

Read, Write, Delete

rwx

Full Access

---

No Access