访问qtree内的NFS路径时权限被拒绝

最后更新
另存为PDF

Knowledge Base guidance

This article may include metadata, visibility, validation state, and related support guidance.

适用场景

ONTAP 9
NS/NFS (Unix和CIFS权限)
qtree权限

问题描述

用户尝试 cd ls 在qtree内执行或访问Unix路径时、NFS客户端上的权限被拒绝、并且主卷采用NTFS安全模式。

[user1@demo~]$ cd /home/apps/finalpathbash: cd: /home/apps/finalpath: Permission denied

qtree父卷安全模式设置为NTFS、因此 CIFS用户可以访问卷：

::> vserver security file-directory show -vserver vs1 -path /vol/volumepath/

Vserver: vs1 File Path: /vol/volumepath/ File Inode Number: 64 Security Style: ntfs Effective Style: ntfs DOS Attributes: 30 DOS Attributes in Text: ---AD--- Expanded Dos Attributes: - UNIX User Id: 0 UNIX Group Id: 0 UNIX Mode Bits: 777 UNIX Mode Bits in Text: rwxrwxrwx ACLs: NTFS Security Descriptor Control:0x8004 Owner:BUILTIN\administrators Group:BUILTIN\administrators DACL - ACEs ALLOW-Everyone-0x1f01ff ALLOW-Everyone-0x10000000-OI|CI|IO

qtree仅供Unix用户访问、但权限设置为NTFS：

::> vserver security file-directory show -vserver vs1 -path /vol/volumepath/QtreePath

Vserver: vs1 File Path: /vol/volumepath/QtreePath File Inode Number: 64 Security Style: ntfs Effective Style: ntfs DOS Attributes: 30 DOS Attributes in Text: ---AD--- Expanded Dos Attributes: - UNIX User Id: 0 UNIX Group Id: 0 UNIX Mode Bits: 777 UNIX Mode Bits in Text: rwxrwxrwx ACLs: NTFS Security Descriptor Control:0x8004 Owner:BUILTIN\administrators Group:BUILTIN\administrators DACL - ACEs ALLOW-Everyone-0x1f01ff ALLOW-Everyone-0x10000000-OI|CI|IO