Still looking at the Storage 7000 and if any one has a documnet how to set it up so that Windows and Solaris desktops share the same filesystems for user home drives please let me know.
Anyway, here is my problem:
1) Create a project "shome" with default settings except
Filesystem Creation Defauls rwxr-xr-x
CIFS on
2) Create new share under project
name=andrew
User=andrew
Group=staff
Permissions=rwxr-xr-x
# ls -ld /export/shome/andrew
drwxr-xr-x 2 andrew staff 2 Jun 1 08:43 /export/shome/andrew
3) Mount On Solaris client (NFS)
root# mount sundemo:/export/shome/andrew /mnt
andrew% ls -ldv /mnt
drwxr-xr-x 2 andrew staff 2 Jun 1 09:43 /mnt/
0:owner@::deny
1:owner@:list_directory/read_data/add_file/write_data/add_subdirectory
/append_data/write_xattr/execute/write_attributes/write_acl
/write_owner:allow
2:group@:add_file/write_data/add_subdirectory/append_data:deny
3:group@:list_directory/read_data/execute:allow
4:everyone@:add_file/write_data/add_subdirectory/append_data/write_xattr
/write_attributes/write_acl/write_owner:deny
5:everyone@:list_directory/read_data/read_xattr/execute/read_attributes
/read_acl/synchronize:allow
4) Now alter ACLS so that it adds a Windows XP Admin Permissions
Root Directory ACL:
Named Group - Domain Admins@dcs.bbk.ac.uk - Allow - Full Control
# ls -dvl /export/shome/andrew
drwxr-xr-x+ 2 andrew staff 2 Jun 1 08:43 /export/shome/andrew
0:group:2147483650:list_directory/read_data/add_file/write_data
/add_subdirectory/append_data/read_xattr/write_xattr/execute
/delete_child/read_attributes/write_attributes/delete/read_acl
/write_acl/write_owner/synchronize:file_inherit/dir_inherit:allow
1:owner@::deny
2:owner@:list_directory/read_data/add_file/write_data/add_subdirectory
/append_data/write_xattr/execute/write_attributes/write_acl
/write_owner/synchronize:allow
3:group@:add_file/write_data/add_subdirectory/append_data:deny
4:group@:list_directory/read_data/execute/synchronize:allow
5:everyone@:add_file/write_data/add_subdirectory/append_data/write_xattr
/write_attributes/write_acl/write_owner:deny
6:everyone@:list_directory/read_data/read_xattr/execute/read_attributes
/read_acl/synchronize:allow
5) Now re-mount on Solaris NFS client
a) Solaris 10 10/08
root# mount sundemo:/export/shome/andrew /mnt
andrew% ls -la /mnt
ls: can't read ACL on /mnt: Permission denied
b) Solaris Express Community Edition snv_110
ls -la /mnt
ls: can't read ACL on /mnt: Permission denied
ls: can't read ACL on /mnt/.: Permission denied
total 5
drwxr-xr-x 2 andrew staff 2 Jun 1 09:43 ./
drwxr-xr-x 40 root root 43 May 27 12:07 ../
Any pointers,
Andrew
Edited by: birkbeck01 on Jun 1, 2009 1:36 AM, since the example was incorrect.