Unsolved
This post is more than 5 years old
13 Posts
0
2682
May 21st, 2018 10:00
Unable to change owner on Windows side
I'm having issue with giving ownership of files and folders to someone else even when I'm the present owner.
I can however take the ownership even when someone else is the owner if I have right permissions. We have a scenario where some departmental admins are copying the data for users and should be able to give back the ownership to the users however it's not working from windows side of management.
I can change the ownership on files and folders being Isilon Admin as well as if I give run as root for the share but both these options are not suitable for our use case.
Are there any settings that are prohibiting this from happening? I have write_dac, write_owner for the users as well as full permission on the share.
Thanks.
crklosterman
450 Posts
0
May 22nd, 2018 04:00
Bestowing ownership is something that Isilon does not support in the same way you would expect it to work on a Windows Server or VNX/NetApp filer. On those systems when you're a member of the local administrators group, you are given a privilege that enables you to bestow ownership rights on a file. On Isilon with SMB Full Control, and NTFS Full Control, you can only set the owner to a specific person if you, yourself are the present owner. So what can you do instead? You already hit the nail on the head; the answer is run-as-root. Run-as-root treats the specific named user or group as if they are root over SMB, and grants them all the rights necessary to do this. This is why, during data migrations to Isilon our software, DobiMigrate creates hidden administrative shares at the root of each access zone, and only gives one user (the migration service account), access to that share with run-as-root rights, so that we can set proper permissions, and ownership.
I would only caution you here to be extremely selective with who you grant this access to, and also, don't do it through the normal user shares. Create an administratively hidden share (put a "$" at the end of the name), at a level higher than where the users would connect.
~Chris Klosterman
Principal SE, Datadobi
chris.klosterman@datadobi.com
rajrut
13 Posts
0
May 23rd, 2018 13:00
Thank you Chris for your response. The problem I'm facing is that even the present owner is unable to change the owner. Support suggested that it's expected behavior. I'm not sure about that though yet.
Thanks!
crklosterman
450 Posts
0
May 25th, 2018 11:00
You're right, the current owner should be able to set the owner to someone else, however you need to be sure that they have full control to the share to be able to do this. Read and Write alone would block changing permissions.