HP CIFS Server Administrator Guide Version A.03.01.03 (5900-2006, October 2011)
Table Of Contents
- HP CIFS Server Administrator Guide Version A.03.01.03
- Contents
- About this document
- 1 Introduction to the HP CIFS Server
- 2 Installing and configuring HP CIFS Server
- HP CIFS Server requirements and limitations
- Step 1: Installing HP CIFS Server software
- Step 2: Running the configuration script
- Step 3: Modify the configuration
- Step 4: Starting HP CIFS Server
- Other Samba configuration issues
- 3 Managing HP-UX file access permissions from Windows NT/XP/2000/Vista/Windows 7
- Introduction
- UNIX file permissions and POSIX ACLs
- Using the Windows NT Explorer GUI to create ACLs
- Using the Windows Vista Explorer GUI to create ACLs
- POSIX ACLs and Windows 2000, Windows XP, Windows Vista, and Windows 7 clients
- HP CIFS Server Directory ACLs and Windows 2000, Windows XP, Windows Vista, and Windows 7 clients
- In conclusion
- 4 Windows style domains
- Introduction
- Configure HP CIFS Server as a PDC
- Configure HP CIFS Server as a BDC
- Domain member server
- Create the Machine Trust Accounts
- Configure domain users
- Join a Windows client to a Samba domain
- Roaming profiles
- Configuring user logon scripts
- Home drive mapping support
- Trust relationships
- 5 Windows 2003 and Windows 2008 domains
- 6 LDAP integration support
- Overview
- Network environments
- Summary of installing and configuring
- Installing and configuring your Directory Server
- Installing LDAP-UX Client Services on an HP CIFS Server
- Configuring the LDAP-UX Client Services
- Enabling Secure Sockets Layer (SSL)
- Extending the Samba subschema into your Directory Server
- Migrating your data to the Directory Server
- Configuring the HP CIFS Server
- Creating Samba users in directory
- Management tools
- 7 Winbind support
- 8 Kerberos support
- 9 HP CIFS deployment models
- Introduction
- Samba Domain Model
- Windows Domain Model
- Unified Domain Model
- 10 Securing HP CIFS Server
- 11 Configuring HA HP CIFS
- 12 HP-UX configuration for HP CIFS
- 13 Tool reference
- Glossary
- Index

Figure 18 Selecting a new ACE user or group
IMPORTANT: POSIX ACEs with zero permission can be modified by adding an ACE and setting
the desired permissions for that user or group. A new ACE can be added by using the Add button
on the Windows ACL interface.
POSIX default owner and owning group ACLs
The POSIX default owner and default owning group ACEs are shown in the Windows interface
as Creator Owner and Creator Group.
In HP CIFS Server A.01.09 version and earlier, only one ACE each for owner, owning group and
everyone is shown if the permissions are the same on corresponding access and default ACEs.
The POSIX default owner and default owning group ACEs are shown in the Windows interface
as Creator Owner and Creator Group even if the permissions on the access and default
ACEs are the same. However, everyone is shown as only one ACE if the access and default
permissions are the same.
Changing permissions on Windows Creator Owner and Creator Group ACEs will only
modify POSIX default owner and owning group ACEs on the HP CIFS Server.
POSIX ACEs with zero permissions
POSIX owning group and everyone ACEs with zeros permissions are not displayed in the Windows
interface. For example, if a directory owning group has zero permissions on the HP CIFS Server,
an ACE for that owning group will not be shown on the Windows interface. ACEs for any other
user or group with zero permissions are shown with no permissions in the Windows interface.
POSIX ACEs with zero permission can be modified by adding an ACE and setting the desired
permissions for that user or group. A new ACE can be added by using the Add button on the
Windows ACL interface.
In conclusion
Samba ACL support is a feature that enables the manipulation of UNIX file permissions or UNIX
ACLs from Windows 2000, Windows XP, Windows Vista or Windows 7 clients.
With this feature, almost any modification you want to make to UNIX permissions or VxFS POSIX
ACLs can now be done from an Windows 2000, Windows XP, Windows Vista or Windows 7
client (with the exception of the class entry for VxFS POSIX ACLs).
Windows applications running on the Windows 2000, Windows XP, or Windows Vista client
cannot expect full Windows 2000, Windows XP, or Windows Vista ACL support. Although much
52 Managing HP-UX file access permissions from Windows NT/XP/2000/Vista/Windows 7