Dumb questions here but...

1.  What permissions did you provide to the local account, Dynamox?

2.  Also, does your application have the PW your local account is using?

3.  What level of access does the local account need?

Just trying to work this out in my head.  I don't use access zones here (no reason) and the local accounts I have aren't for zone access.

Brian,

1) I need to give this account either Full or Modify permissions, have not decided yet.

2) Yes, this application runs on a server that is not joined to AD. The application has a place where you specify username and password.

3) Not sure what you mean ?

Be Very careful using the 'local' auth provider in access zones.  Why?  Because if you have to SyncIQ the data to another cluster, those local accounts wouldn't exist.  I would, instead, suggest using a file provider inside the access zone, so if the root path of the access zone is: /ifs/zone2, create a directory called /ifs/zone2/auth/ and store the local passwd and group file in it. SyncIQ that folder 'auth' to the target cluster, and then you can setup the file provider on the DR cluster as well.  Of course it's read-only there.

Just consider it a friendly suggestion if DR of the data is of concern.

-Chris

What I mean is what level of access does the local account need.  Root?

Chris,

DR is handled by application.  Application in question is GE Enterprise Archive, it will be configured to write to two Isilon clusters at the same time. So i have created the same local account on both clusters (different access zones names but that should be immaterial here)

Any thoughts on how to add local account to folder permissions ?

Thank you

Brian,

this account should be just able to read/write data to a CIFS share, it will not need to do anything at cluster level (ssh, REST ..etc)

Thanks Dynamox, just asking here (out of curiosity, I don't know that I have the answer you need). I was thinking about local accounts and what level of access it needs.  When you created the local use, did you select a primary and any additional groups? 

EG:  For Primary group are you choosing from A/D or the local groups (ie: Administrator, Isilon Users, etc) and then adding additional groups?  In my head I am trying to figure out the right setting for the permission level you need.

Cheers

Yes, I can provide local user access to a SMB share.  That is why I was asking what level of permissions (explicitly) that you're applying to the local account.

In my case, I have some applications that require ROOT/WHEEL level privileges for the local account. Does that help?  What OneFS version are you using BTW?

Brian,

I did not enter anything for UID nor Primary Group, i entered username and password and changed Unix shell to "no login" and enabled the account.

I know you are not using access zones, on your cluster can you create a local account and assign it to folder permissions ?