This post is more than 5 years old
1 Rookie
•
13 Posts
0
2511
June 10th, 2011 09:00
Restore Ownership
Hey All -
So.. I was messing around with permissions this morning try to remove the "EVERYONE" out of the NTFS perms and accidentally locked myself out of one one of my File System folders (\\nas\c$\FSNAME), is there anyway from the CS to change the ownership of the share so i can fix the permissions?
Thanks -
Chris
No Events found!
bergec
275 Posts
0
June 10th, 2011 10:00
There is also a program on the Tools&Apps CD that you can use from a Linux system to see or set ACLs (the FS must be exported to that Linux server for root, mounted on the Linux server and you must be root)
Look in the "Managing Celerra Multiprotocol Environment" document in the section "manage ACLs from Unix client"
Param cifs acl.extacl must be set to 5
For example (view ACL)
./emcgetsd -D ip-nas /mnt/tmpdm3/dir7
Server=dm3, Path in the server=/tmpdm3/dir7
Dump of /tmpdm3/dir7 Security Descriptor
Owner uid=502 NT='BUILTIN\Administrators'
Group gid=10001 NT='UNIX GID=0x2711 '''
----------------DACL ----------------
GRANT ALL NT='Everyone'
Access RWXPDO 0x1f01ff
FullControl
Modify
ReadExecute
Read
Write
ListFolderContents
Flags 0x13
OBJECT_INHERIT
CONTAINER_INHERIT
INHERITED_ACE
----------------SACL ----------------
none
Example (set ACE):
./emcsetsd -D ip-nas -g bergec,ReadExecute /mnt/tmpdm3/dir7
Server=dm3, Path in the server=/tmpdm3/dir7
1 ACE added
./emcgetsd -D ip-nas /mnt/tmpdm3/dir7
Server=dm3, Path in the server=/tmpdm3/dir7
Dump of /tmpdm3/dir7 Security Descriptor
Owner uid=502 NT='BUILTIN\Administrators'
Group gid=10001 NT='UNIX GID=0x2711 ''‘
----------------DACL ----------------
GRANT uid=1001 NT='IP-NAS\bergec'
Access R-X---0x1200a9
ReadExecute
Read
ListFolderContents
Flags 0x0
GRANT ALL NT='Everyone'
Access RWXPDO 0x1f01ff
FullControl
Modify
ReadExecute
Read
Write
ListFolderContents
Flags 0x13
OBJECT_INHERIT
CONTAINER_INHERIT
INHERITED_ACE
----------------SACL ----------------
none
Claude
umichklewis_ac7b91
300 Posts
0
June 10th, 2011 09:00
Your first option is to use an account with Administrative rights and access the share via the Windows Computer Management MMC snap-in. If you have rights, you should be able to change the Share Permissions from there. At the very least, you should be able to Take Ownership.
Another possibility: delete the CIFS share and re-create the share (don't touch the filesystem). The new share should have base access permissions, and let you Take Ownership again.
Let us know if this helps!
Karl
Rainer_EMC
4 Operator
•
8.6K Posts
0
June 10th, 2011 09:00
If you dont know where it is or how its called you can also connect via NFS or FTP – but you cant use that to manipulate CIFS ACLs
umichklewis_ac7b91
300 Posts
0
June 10th, 2011 09:00
If it's a folder on the share, and you have a Windows account with administrative access, can't you just take ownership and reset ACLs? If you don't have Administrator access, can you ask another admin?
Karl
Rainer_EMC
4 Operator
•
8.6K Posts
0
June 10th, 2011 09:00
If you connect with an account that is a member of the Celerra’s CIFS servers administrators group you can always take ownership and change the permissions
cmschube-dell
1 Rookie
•
13 Posts
0
June 10th, 2011 09:00
Hey Karl/All -
Thanks for the response.. Unfortunately, it's not a CIFS share, but rather one of the NTFS folder that it creates under the C$ share on the CIFS Server.. I'm not sure the right name, but is one of the Filesystem folders. Kinda like hoseing the permissions on a local folder on a local disk.
I tried the MMC thing, no dice.. And I did try to recreate the share, but that didn't go over to well either.. It's not a huge deal since this isn't a production FS, but I was just thinking that I can't be the first person who's done this, and rebuilding the entire FS seems a little extreme..
Thanks again -
Chris
cmschube-dell
1 Rookie
•
13 Posts
0
June 10th, 2011 10:00
Thanks everyone -
Claude, your way did the trick.. Thanks!
bergec
275 Posts
0
June 10th, 2011 10:00
I'm wrong, it's bit 5 which must be set, like in the following command:
server_param server_X –f cifs –m acl.extacl –v 32
Claude