Currently with ZFS you can only set quotas on file systems and that has
nothing to do with shares or ACLs. So what you do is create a ZFS file
system for each group, set the quota on the file systems, share them out
the and set the ACL on the shared directories.

Afshin

Richard Bruce wrote:
> Afshin,
>  
> Thanks for the email.  Maybe I am missing something, but I don't think 
> we are talking about the same problem.  As you have pointed out, ACL's 
> can only be set on directories.  AFAIK, quotas can only be set on 
> shares.  So...this means that I can get quotas or ACL's, but not both?  
> Am I missing something?
>  
> What we want is the ability to set both quotas and ACL's on the same 
> resouce (we don't care if it is a share versus a directory; either one 
> will do).
>  
> Thanks,
> Richard
> 
> ------------------------------------------------------------------------
> *From:* Afshin Salek <[email protected]>
> *To:* Richard Bruce <[email protected]>
> *Cc:* [email protected]
> *Sent:* Thursday, January 8, 2009 3:05:28 PM
> *Subject:* Re: [cifs-discuss] ZFS filesystem and CIFS permissions issue?
> 
> As I mentioned in my previous email you can set the ACL on the directory
> itself instead of the share. Taking you example below, you can set an
> ACL on Group_A_Directory but you cannot set ACL on Group_A_Share. If you
> just have one share for each directory then setting the ACL for the
> directory would have the same effect of setting the ACL for its share.
> 
> Afshin
> 
> Richard Bruce wrote:
>  > Afshin,
>  >
>  > Thanks for your reply.  We are in an enterprise environment in which 
> active directory is used for all user management.  As we are trying to 
> replace our Windows shared data storage, we need to have a solution that 
> will work without having to define and manage Unix users and groups.  
> What we are trying to accomplish what we thought was a very basic task 
> with the following three requirements:  1. Provide storage space for 
> various active directory managed groups.  2. Be able to assign quotas to 
> the space used by each group.  3. The contents of each groups storage 
> space should only be accessible by that group.
>  >
>  > Currently we use shares with group directories contained within.  We 
> would like to convert each group shared directory to a ZFS filesystem so 
> that we can use ZFS quotas for managing group disk usage.  Our current 
> structure looks something like the following:
>  >
>  > \\Server\GroupShare
>  >                    Group_A_Directory
>  >                    Group_B_Directory
>  >                    Group_C_Directory
>  >                    ...
>  >
>  > As child ZFS filesystem support is not available within CIFS, we will 
> have to convert each group directory into its own share if we want to be 
> able to assign quotas.  This would like like the following:
>  >
>  > \\Server\Group_A_Share
>  > \\Server\Group_B_Share
>  > \\Server\Group_C_Share
>  > ...
>  >
>  > This is fine, but we need to then be able to restrict rights to the 
> root directory of each group share.  If ACL's are not supported for the 
> share is there a different way for us to accomplish this task?
>  >
>  > Thanks!
>  > Richard
_______________________________________________
cifs-discuss mailing list
[email protected]
http://mail.opensolaris.org/mailman/listinfo/cifs-discuss

Reply via email to