Unsolved
This post is more than 5 years old
39 Posts
0
576
December 15th, 2015 03:00
Impact of having same path for two Access zones
Hello,
Need some input on access zones.
What would be impact of keeping same path for two access zones refer to admin guide it says that it should not be identical but what would be impact for the same if anyone from Isilon experts can provide their input.
The base directory cannot be identical to the base directory of any other access zone, except the System zone. For example, you cannot specify /ifs/data/hr to both the zone2 and zone3 access zones. l Cannot overlap with the file system tree of a base directory in any other access zone, except the System zone. For example, if /ifs/data/hr is assigned to zone2, you cannot assign /ifs/data/hr/personnel to zone3.
Thanks
Chughh
AdamFox
254 Posts
0
December 15th, 2015 13:00
This used to be allowed, pre 7.1.1. It was no longer allowed starting in 7.1.1 through the current release. In an upcoming future release it will be possible to do this again.
It only makes sense for certain use cases. You have to be really careful, especially if you are using different authentication sources in your access zones because the permissions may not make sense. At the end of the day, it may make sense to re-think how the data is laid out and accessed. If you are changing domains within a given tree or potentially changing UID/GID sets within a given tree, you could really break security.