Hi,

Is it a good idea to have root own the isilon share folder? I guess this is the default behaviour which is when you create a NFS share, it is default owned by root. I see this as an issue as the root id is squashed and mapped to nobody. So we cannot have a share with permissions 700 as no one would be able to access it. Thus in order to make it work and accessible to users, we have to open up the permissions for the group and sometimes for others too.

What would be the best way to achieve this?

Case 1: When only one user accesses this share from NFS.

    Can we just chown the folder to the user and mount it on client so the user can access the data and no one else?

Case 2: When the data needs to be accessed by a group of people.

     We can chgrp to the group and add the group to people who need to have access as their subgroup?

Any other ways to improve the security and limit the access to authroized users? Is there any best practices document regarding this?

Thanks!