Unsolved
This post is more than 5 years old
16 Posts
0
6657
June 6th, 2013 11:00
Isilon folder permissions (windows) without domain
Hello,
I have got a concern about an Isilon cluster with OneFS 7.01.
The system is not joined to a Windows Domain, it shall work as a standalone server.
It has one configured subnet with one pool in it. The Access Zone of this pool is "System".
I set up local groups and users in System/LOCAL:System, for example user "user1" and group "production". "user1" is part of the "production" group. After that I created a share "data", with share permission "Everyone" full control. This share is located in /ifs. After connecting to the IFS share with user "root" from a windows machine I browsed to the /ifs/data folder and created a subfolder "production" in it.
When I try to change the file security permissions of the folder "production" I get an error message that "The programm cannot open the required dialog box because it cannot determine whether the computer named "ip address of the node" is joined to a domain. Close this message, and retry".
Did I miss something during Isilon setup/configuration or is it impossible to set windows file security permissions without a domain, even with local users? Am I recuced to share permissions without a domain?
Thanks.
Robert
0 events found
Narahari1
2 Intern
•
127 Posts
1
June 7th, 2013 07:00
try any of these options..
Connect to the Isilon system using Computer Management, connect to another computer, IP of the system zone, Shared folders, shares, properties and try to set permissions for the share/security there. If there is no share for folder production, create a share and then set the Security permissions and you can delete the share later.
OR ssh to isilon, while in cli list the users and groups. "isi auth users list" and "isi auth groups list" make sure they are there, then set the ownership using "chown user1:production /ifs/data/production" and set the permissions using "chmod xxx /ifs/data/production" where xxx is the unix permissions.
I have come across this issue in the past when I configured isilon cluster to use with data domain as a backup location and was able to change the permissions thru cli.
Robert_S1
16 Posts
0
June 10th, 2013 08:00
Thanks for your help Narahari,
adding users or groups using Computer Management did not work. Same error.
I checked users and groups with "isi auth users list" and "isi auth groups list". The customers local Isilon users and groups do appear there. After creating a folder with windows explorer I did set the ACLs with "chmod +a group GROUPNAME allow generic_all /ifs/FOLDERNAME". After that they appear on security permission in windows explorer. It is even possible to change the user rights and inheritance settings. Also it is possible to remove the user using windows explorer. Adding users with windows explorer is still not possible. That's a workaround for me to get the system working, but the customer is not amused about it.