beautypg.com

HP NetStorage 6000 User Manual

Page 61

background image

Managing Storage

Allowing Access to Data

4-16

The fields must be separated by one or more spaces or tabs. If a specifier
contains space characters (such as a directory name that contains spaces),
then the entire specifier must be enclosed in double quotes.

Whenever a host attempts to mount a volume, the approve file is searched
to determine the appropriate access to grant the host. The file is searched
sequentially from top to bottom. When a match is found to the host pattern
and the volume specifier, then the associated access rights are applied. All
entries in the file after the matched entry are ignored. Therefore, it is
important to order the entries in the file so that the more specific entries are
listed first, and the more general entries are listed last.

Field

Restrictions

class

This field specifies the class of object to protect. In all
cases, the object is files.

specifier

This field specifies the resources on the NetStorage 6000
server to protect. For example, /engineering, applies to all
files and directories in the

/engineering

file system.

host pattern

This field has the name of a host or group of hosts that
have access rights. Host names must be resolvable
through the local

/etc/hosts

file, the NIS hosts file,

or through DNS. Groups of hosts are specified in the

/

etc/hostgrps

file. If the host pattern is the name of a

group, then it must be preceded by the @ symbol. The
wildcard character ( * ) may be used to specify all hosts.
Note that the

@general

group is a pre-defined group

that specifies all hosts.

rights

This field specifies the access limits to apply. The entry
in this field can be:
access=rw Allow read and write access to the resources
access=ro Allow read only access to the resources
access=none Deny all access to the resource