Afshin,

Thanks for the email.  Maybe I am missing something, but I don't think we are 
talking about the same problem.  As you have pointed out, ACL's can only be set 
on directories.  AFAIK, quotas can only be set on shares.  So...this means that 
I can get quotas or ACL's, but not both?  Am I missing something?

What we want is the ability to set both quotas and ACL's on the same resouce 
(we don't care if it is a share versus a directory; either one will do).

Thanks,
Richard




________________________________
From: Afshin Salek <[email protected]>
To: Richard Bruce <[email protected]>
Cc: [email protected]
Sent: Thursday, January 8, 2009 3:05:28 PM
Subject: Re: [cifs-discuss] ZFS filesystem and CIFS permissions issue?

As I mentioned in my previous email you can set the ACL on the directory
itself instead of the share. Taking you example below, you can set an
ACL on Group_A_Directory but you cannot set ACL on Group_A_Share. If you
just have one share for each directory then setting the ACL for the
directory would have the same effect of setting the ACL for its share.

Afshin

Richard Bruce wrote:
> Afshin,
> 
> Thanks for your reply.  We are in an enterprise environment in which active 
> directory is used for all user management.  As we are trying to replace our 
> Windows shared data storage, we need to have a solution that will work 
> without having to define and manage Unix users and groups.  What we are 
> trying to accomplish what we thought was a very basic task with the following 
> three requirements:  1. Provide storage space for various active directory 
> managed groups.  2. Be able to assign quotas to the space used by each 
> group.  3. The contents of each groups storage space should only be 
> accessible by that group.
> 
> Currently we use shares with group directories contained within.  We would 
> like to convert each group shared directory to a ZFS filesystem so that we 
> can use ZFS quotas for managing group disk usage.  Our current structure 
> looks something like the following:
> 
> \\Server\GroupShare
>                    Group_A_Directory
>                    Group_B_Directory
>                    Group_C_Directory
>                    ...
> 
> As child ZFS filesystem support is not available within CIFS, we will have to 
> convert each group directory into its own share if we want to be able to 
> assign quotas.  This would like like the following:
> 
> \\Server\Group_A_Share
> \\Server\Group_B_Share
> \\Server\Group_C_Share
> ...
> 
> This is fine, but we need to then be able to restrict rights to the root 
> directory of each group share.  If ACL's are not supported for the share is 
> there a different way for us to accomplish this task?
> 
> Thanks!
> Richard
_______________________________________________
cifs-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/cifs-discuss

Reply via email to