2.12NFS Issues

NFS root user doesn't have appropriate access.

StorEdge implements a feature known as “root squash”. When a user connects as root (UID 0) from an NFS client, StorEdge causes the UID to be mapped to UID 60001, the “nobody” account. In order for an NFS client to have root access to StorEdge, you must create a trusted hosts entry, or explicitly define root access for a particular export.

To test whether you have root access: create a file with the touch command, then use ls –ln filename to view the ownership. If the owner is UID 60001, then correct as above.

NFS root user can't change ownership.

NFS root user can't change security.

This typically occurs when a file or directory has been created or modified by a Windows client. Windows uses complex security descriptors, known as ACLs or Access Control Lists. These cannot always be accurately represented using NFS security attributes. Therefore, to prevent NFS users from circumventing these security descriptors, modification of security or ownership is not permitted on files with ACLs.

It is possible to remove ACL information for a single file, or for an entire volume. Removing the ACL information allows the security and ownership for these objects to be edited from NFS clients once again, with appropriate permissions and ownership.

This functionality is only available at the StorEdge CLI (command line interface).

1.To access the StorEdge CLI, connect to the StorEdge via Telnet, and type “admin” at the [menu] prompt and enter the administrator password.

2.At the CLI, enter “chsmb <filename>” or “chsmb <volumename>”.

For <filename>, use a full path, including volume. A directory is acceptable for <filename>, but chsmb can not be run recursively. A warning is displayed only when a <volumename> argument is used.

It is also possible to modify this behavior as a system policy. Generally, this is not recommended in environments where Windows security is important.

Chapter 2 NAS Head 2-61

Page 107
Image 107
Sun Microsystems 5310 NAS manual NFS Issues, NFS root user doesnt have appropriate access

5310 NAS specifications

Sun Microsystems, known for its innovative computing solutions, launched the Sun 5310 Network Attached Storage (NAS) system, which marked a significant advancement in the realm of storage solutions in the early 2000s. The 5310 NAS was designed to provide high-performance, reliable, and scalable storage tailored for enterprise environments.

One of the standout features of the Sun 5310 NAS is its file-serving capabilities, which support multiple protocols, notably NFS (Network File System) and CIFS (Common Internet File System). This dual-protocol support allowed organizations to seamlessly integrate the NAS into diverse IT ecosystems, facilitating interoperability between UNIX, Linux, and Windows systems. The enhanced file-sharing capabilities made it an ideal solution for businesses with mixed operating environments.

The Sun 5310 NAS incorporates cutting-edge technologies to ensure high availability and data integrity. The system utilized a RAID (Redundant Array of Independent Disks) technology, providing various RAID levels to protect against data loss while optimizing performance. Additionally, the device featured hot-swappable drives, enabling maintenance and upgrades with minimal downtime, a crucial factor for business continuity.

Equipped with advanced management software, the Sun 5310 NAS offered users an intuitive interface for monitoring storage health and performance. This software included comprehensive reporting functionalities that allowed IT administrators to oversee usage patterns and capacity planning efficiently.

Scalability was another defining characteristic of the Sun 5310 NAS. The system could easily expand with additional storage modules, accommodating the growing needs of an organization without the necessity for complete system overhauls. This flexibility ensured that businesses could adapt their storage solutions to meet evolving data storage needs without incurring significant costs or disruptions.

In terms of performance, the Sun 5310 NAS featured high I/O throughput achieved through its robust hardware architecture and optimized file serving capabilities. This performance baseline was crucial for organizations that relied on heavy data workloads and required rapid access to information.

In summary, the Sun 5310 NAS from Sun Microsystems embodied a forward-thinking approach to network storage, blending reliability, scalability, and multi-protocol support. Its user-friendly management software, combined with the robustness of RAID technology and hot-swappable drives, made it a preferred choice for enterprises looking to streamline their storage infrastructure while safeguarding critical data.