FrancisVD

updated

12 years ago

F

FrancisVD

1 Rookie

•

14 Posts

1

1453

March 5th, 2015 05:00

Isilon: restrict role based access per Access-Zone??

Hello,

I'm wondering if there is an easy way to restrict NFS (creating exports) and Quota management to a specific Access-zone?

We have an Isilon clusters with 5 access zones, and the idea is that each can manage its own zonen including NFS exports and quotas.

For SMB this is no problem, because the Microsoft MMC snap-in can connect via the access-zone and create shares etc per access-zone.

But I'm not aware of an equivalent solution for NFS and quotas.

Regards

Francis

  • Peter_Sero

    6 Operator

    •

    1169 Posts

    937

    1

    Posted March 5th, 2015 20:00

    OneFS 7.2 has introduced zone-based access for NFS clients,

    but role-based administration is still "global" on a cluster:

    All administrators, including those given privileges by a role, must connect to the System zone to configure the cluster. When these members log in to the cluster through a configuration interface, they have these privileges. All administrators can configure settings for access zones, and they always have control over all access zones on the cluster.

    (p 186. https://support.emc.com/docu56048_OneFS-7.2-CLI-Administration-Guide.pdf)

    Anyone from Isilon giving a glimpse of the roadmap here?

    -- Peter

  • geekfyi

    3 Posts

    937

    3

    Posted March 5th, 2015 20:00

    The only way I can think of to currently do this would be to write your own script or application that used the OneFS API.