XSan Permission Issue and ..

buchau's picture

We currently moved from
Mac OSX 10.6.x MDCs using XSAN 2.2.x / Mac OSX Open Directory / XSAN 2.2.x Mac OS X 10.6.x Clients / Promise Storage ( all connected via Fiber Switch )
to
StorNext MDCs ( M440 Appliance ) version 4.7/ New Storage / Old Promise Storage was left intact and still being utilized / New MAC OS X 10.8.x XSAN Clients / Two new Windows 2008 Servers utilizing Stornext Clients All still connected via Fiber Switch.

All The Fiber connected Clients Mac OS X 10.8.x ( XSAN Client ) via Fiber & Two Windows 2008 R2 Server ( Stornext Client ) can see the old ( XSAN ) LUNs & the new ( StorNext ) LUNs and mount the volumes ( lets call this xsan1 and snfs1 ) I can see and access ALL the folders via the MAC OS X 10.8.x fiber clients but via Windows I see the volume but am not able to access "all" the contents. At first I saw the generic permission message indicating " You don't currently have permission to access this folder. Click continue to permanently get access to this folder"
At which point I can choose to continue, and take ownership of the folder. that works to a certain extent but I still get access denied while taking ownership of multiple folders and so on ..... I have been reading up on this issue and came across few things but figured I would come to the PROs and see what is the best way to approach this issue.
I also would like to utilize my Active Directory Domain to authenticate users to login to the MACs and also permission to the old Xsan volume and new snfs volume.
any help is greatly appreciated and I look forward to hearing from the PROs
Thanks

abstractrude's picture

You need permission entires for you windows machines. There is a number of forum entires on this in xsanity. Additionally Apple ACLS are formatted like windows so in theory you can have specific entries for both windows and mac in the same ACL.

I would look into properties and security tab on your windows machine.

-Trevor Carlson
THUMBWAR

buchau's picture

abstractrude wrote:
You need permission entires for you windows machines. There is a number of forum entires on this in xsanity. Additionally Apple ACLS are formatted like windows so in theory you can have specific entries for both windows and mac in the same ACL.

I would look into properties and security tab on your windows machine./quote

@abstractrude: I am glad to hear from you as I came across couple of post with your comments that were helpful, but unfortunately I didn't come across ( at least not yet ) with exactly how to properly do this. At first i only saw the drive mounted but wasn't able to see any properties on the drive ( like usable/free space ) I did add the local administrator group to have full access and even tried to take ownership but kept coming across "access denied" while it was trying to take ownership of it. what would be the best way for me to add permission for windows machines from MAC Clients as i am unable to do so from windows machines.

abstractrude's picture

I think your best bet is to use Active Directory. You have two windows servers so you're ready to go! Load that Active Directory up and get started.

-Trevor Carlson
THUMBWAR

buchau's picture

abstractrude wrote:
I think your best bet is to use Active Directory. You have two windows servers so you're ready to go! Load that Active Directory up and get started./quote

Using ActiveDirectory was exactly the idea behind getting away from MAC Servers in the first place. I have already created proper security groups in AD for permissioning users ( non-fiber connections ) so they could access the files that resides on xsan1 and snfs1 via windows share. Issue again that i am having is permissioning these windows servers to even apply those AD groups proper permission. How can i permission these windows server when these windows server keep getting access denied. Is there a way to reset the permission properly from MAC OSX 10.8 Xsan client side so windows server can be given access ? if so how do i reset the permission which would even allow me to take ownership of the drive/folders/files on the Xsan volume ?

csanchez's picture

You can add the ACLs from a Mac--either with Server.app or chmod.