网络文件系统(NFS)背景介绍解析.pdf

NetApp Storage System Multiprotocol Use Guide Ellie Berriman, Network Appliance, Inc. June 2006 | TR-3490 Executive Summary NetApp storage systems are designed to provide access to stored data in both UNIX® and CIFS networking environments. This access is transparent to the client because of native multiprotocol support, providing a bridge between UNIX file security style and Windows® file security style by mapping the UNIX identities and Windows identities. This report provides a summary of how the security styles and user mapping work together to provide seamless access to data. Table of Contents 1. Introduction 3 1.1 Overview 3 1.2 Purpose and Scope 3 2. Multiprotocol on the NetApp Storage System 3 2.1 Authentication in a Multiprotocol Environment 3 2.2 Export and Share Security 4 2.3 Data ONTAP File Security Styles and Multiprotocol Access 4 2.4 Security Styles and User Mapping 5 2.5 Multiprotocol Access and Group Mapping 7 2.6 Caching User Mapping Information: The WAFL® Credential Cache 7 2.7 Managing File and Folder Security 8 3. Display and Effective Permissions in a Multiprotocol Environment 8 3.1 Display and Effective Permissions Prior to Data ONTAP 7.2 9 3.2 Display and Effective Permissions Beginning with Data ONTAP 7.2 11 4. Changing Security Styles 13 4.1 Changing an NTFS or Mixed Volume with NTFS Effective Security to a UNIX Volume 13 4.2 Changing a UNIX or Mixed Volume with UNIX Effective Security to an NTFS Volume 14 5. Root and Administrative Access 14 6. The Multiprotocol Access Process 16 6.1 NFS Access of UNIX Security