10400455-002
©2008-14 Overland Storage, Inc.
251
SnapScale/RAINcloudOS 4.1 Administrator’s Guide
B - Security and Access
For example, assume the snapshot share named
Sales_SNAP
contains the following four
directories:
latest
2014-02-25.120000
2014-03-01.000100
2014-03-07.020200
The
latest
directory always points to the most recent snapshot (in this case,
2014-03-
07.020200
, or March 7th, 2014, at 2:02 a.m.). A user may view an individual file as it existed
at a previous point in time or even roll back to a previous version of the file by creating a file
copy to the current live volume.
NOTE: The latest subdirectory is very useful for setting up backup jobs, as the name of the directory
is always the same and always points to the latest available snapshot.
Depending on their ability to cross bind mounts, locally-installed backup agents can access the
snapshot share in one of two ways:
•
via
/shares
(for example,
/shares/SHARE1_SNAP/latest
)
•
via
/links
(for example,
/links/SHARE1_SNAP/latest
)
File-level Security
RAINcloudOS supports two “personalities” of filesystem security on files and directories:
•
Windows ACLs
: Windows NTFS-style filesystem permissions. Windows ACLs fully
support the semantics of NTFS ACLs, including configuration, enforcement, and
inheritance models (not including the behavior of some built-in Windows users and
groups).
•
Unix
: Traditional Unix permissions (rwx) for owner, group owner, and other.
By default, volumes are created with the Windows/Unix security model (Windows-style ACLs
for files created by SMB clients and Unix-style permissions for files created by other protocols
and processes), and allow all users to create, delete, and configure permissions on their own
files and to access files and directories created by other users.
Security Personalities and Security Models
The security personality of a file or directory is dependent on the security model of the root
directory or volume in which the file or directory exists.
Files and directories in a Windows/Unix security model can have either a Windows or Unix
security personality, depending on the network protocol used to create the file or change
permissions on it. Files in a Windows security model always have the Windows security
personality and permissions can only be set by Windows SMB clients. Files in a Unix security
model always have the Unix security personality and permissions can only be set by non-SMB
clients.
Windows ACLs
RAINcloudOS fully supports Windows NTFS-style filesystem ACLs, including configuration,
enforcement, and inheritance models. Inside Windows/Unix and Windows security models,
files created and managed by Windows clients have the Windows security personality and
