RE: Network Attached Storage (NAS)

["Walden H. Leverich" <WaldenL@xxxxxxxxxxxxxxx>]

My guess is that you'll have to set authority through the interfaces
provided by the PROCOM device. It's that device that owns security on the
NAS box, not the AS/400. Did you do anything to allow QSECOFR access? If not
I'd consider it a bug that the NAS box is even allowing QSECOFR. You may be
right that it's allowed because of the 0 UID, but that is so easy to fake
that I'd be scared that my NAS box allowed anyone with a UID of 0 access.

-Walden

------------
Walden H Leverich III
President
Tech Software
(516) 627-3800 x11
(208) 692-3308 eFax
WaldenL@TechSoftInc.com
http://www.TechSoftInc.com



-----Original Message-----
From: Smith, Dave [mailto:dsmith@tshsc.com]
Sent: Thursday, February 21, 2002 13:21
To: 'midrange-l@midrange.com'
Subject: Network Attached Storage (NAS)


        We have two systems, one running V4R5 and the other running V5R1. We
are trying to mount to a PROCOM Netforce 1500 Network attached storage
(NAS) appliance currently available on our network.   The NAS supports both
Windows and Unix file permissions.

        We can mount to the NAS as QSECOFR and access the directories
currently located on it.  Great!.

        No other users can access the NAS even those with QSECOFR authority.
The error message from ops nav is: "Access is denied for object \NAS01\*.*.
Please ensure you have been given authority to access this object."

        When trying to set permissions as Qsecofr on the mounted file system
through ops nav, we get the following error: "AS400 Message (ID: CPFA0AD
text: Function not supported by file
system.):com.ibm.as400.access.AS400Message@2bbb00d7"

        The only thing we can think of is that QSECOFR is allowed to access
because that user profile has a 0 UID and no others are allowed to have a 0
UID.

        Does anyone have a clue where we can go from here?  I've played with
the MOUNT options to no avail.  I do not know the details of the EXPORT on
the NAS that made it available to us on the AS400, but due to the fact that
QSECOFR can do everything, tells me it was done correctly.  Help!


David J. Smith
IS Contractor
Tri-State Hospital Supply
(517) 546-5400  Ext. 1513
dsmith@TSHSC.com


_______________________________________________
This is the Midrange Systems Technical Discussion (MIDRANGE-L) mailing list
To post a message email: MIDRANGE-L@midrange.com To subscribe, unsubscribe,
or change list options,
visit: http://lists.midrange.com/cgi-bin/listinfo/midrange-l
or email: MIDRANGE-L-request@midrange.com
Before posting, please take a moment to review the archives
at http://archive.midrange.com/midrange-l.