Apple Mac OS X Server Print Service Administration For Version 10.4 or Later Instrukcja Użytkownika Strona 214

  • Pobierz
  • Dodaj do moich podręczników
  • Drukuj
  • Strona
    / 232
  • Spis treści
  • BOOKMARKI
  • Oceniono. / 5. Na podstawie oceny klientów
Przeglądanie stron 213
214 Appendix B ACL Permissions and Group Memberships Using GUID
Now, two users can have identical long name, short name, UID, and GID, but will have
different GUIDs. Thus they can have different ACL permissions and can belong to
different groups. Since the GUID is a 128-bit value, duplicate GUIDs are extremely
unlikely.
As an administrator you must now make sure you can restore user accounts with GUIDs
intact. Restoring user accounts with UID, GID, and short name but no GUID will not
restore ACL permissions or group membership in Mac OS X version 10.4 or later.
ACLs Augment POSIX Permissions
An ACL is a list of access control entries (ACEs), each specifying permissions to be
granted or denied to a user or group for accessing a folder and its contents. An ACL
also specifies how its permissions propagate through a folder hierarchy. You can set
ACL permissions in addition to standard POSIX permissions.
Every file and folder always has POSIX permissions. Unless an administrator assigns ACL
permissions, the POSIX permissions continue to determine user access in a Mac OS X
v10.4 system. If you assign ACL permissions, they take precedence over the standard
POSIX permissions. For more information about ACL and POSIX permissions, review the
file services guide.
GUIDs and Groups
Mac OS X version 10.4 verifies group and nested group membership by checking
GUIDs. A group’s GUID is also used by file system ACLs and is stored on disk in the ACE.
The legacy user short name is used only if there’s no GUID present in the group record.
File Permissions and Synchronization
Having the same POSIX permissions for files synchronized between two computers
requires having the same UID on both machines. Having the same ACL permissions on
both computers requires matching GUIDs as well. This can be done using Workgroup
Manager or command-line directory editing tools, or simply by having both machines
share the same directory.
Portable Home Directories (PHDs) rely on a user having the same GUID in the local user
account on the user’s computer and in the network user account on an Open Directory
server. This ensures that file permissions are the same whether the user logs in using
the local user account (while disconnected from the network) or the network user
account.
For information about GUID implementation across directories refer to the Open
Directory admin guide.
Przeglądanie stron 213
1 2 ... 209 210 211 212 213 214 215 216 217 218 219 ... 231 232

Komentarze do niniejszej Instrukcji

Brak uwag