Supervising the Network

3-13
Managing the NetWare Services File System
File Access Control
Using HP-UX Only for File Access Control
When “UNIX” is selected as the mode for file access control, the HP-UX
permission bits are used to calculate effective NetWare rights to a file or
directory. Each NetWare Services user has a UID and a GID and these are
compared with the file or directory’s UID and GID. The UID and GID are
established by default or through the hybrid user feature.
Figure 3-3 illustrates this process.
Figure 3-3 HP-UX File Access Control Checks
NetWare Services users can have a match on more than one UID. The UID
matches under the following conditions:
• The NetWare user’s hybrid UID matches the file’s (or directory’s) UID.
• The file’s (or directory’s) UID is nwuser and the user is logged in.
• The file’s (or directory’s) UID is nwroot and the user is logged in to the NetWare
server as the network administrator.
If the user’s hybrid UID is 0 (Root), the user is granted all HP-UX rights to
the file or directory, regardless of HP-UX permission bits. Some NetWare
rights are still restricted (namely, Supervisor and Access Control, which
allow users to grant NetWare trustee assignments).
no no
yes yes
UIDs
match?
no
yes
Other
has permission?
Start here
GIDs
match?
Deny
access
no
Grant
access
yes
Attributes
okay?