Novell Dynamic File Services v2.1, ACL's differ on the Secondary from the Primary.

  • 7015204
  • 16-Jun-2014
  • 16-Jun-2014

Environment

Novell File Management Suite Dynamic File Services

Situation

Novell Dynamic File Services v2.1, ACL's differ on the Secondary from the Primary.

Resolution

Run the following command in a Command Prompt window"
C:\Program Files\Dynamic File Services>dswpaircheck -pair="PairName" -folders -csv="PairName-folders.csv"
The output of this command will create a file. In this case "PairName-folder.csv". 
Open the file with Microsoft Excel.

It will contain the following columns:
Foldername   
baseSrcPath   
srcAttributes   
srcACLs   
baseDstPath   
dstAttributes   
dstACLs   

In Column "H" Create header "True/False".  Compare columns D "srcACLs " and G "dstACLs" using the following formula "=IF(D2=G2,0,1)"
If the contents of "srcACLs " and "dstACLs" differ, the cell will have the value of 1, if they are the same then the cell will have the value of 0.

Example where ACL's appear to have mirror incorrectly.
======================================
srcACLs:
UserName:Allow:Modify, Synchronize;      <<<<<-------------
Dynamic File Services Storage Rights:Allow:FullControl;
SYSTEM:Allow:FullControl;
FSAdmin:Allow:FullControl;
Administrators:Allow:FullControl
======================================
dstACLs:
Dynamic File Services Storage Rights:Allow:FullControl;
SYSTEM:Allow:FullControl;
FSAdmin:Allow:FullControl;
Administrators:Allow:FullControl
======================================

Note ";" semi-colon as the delimiter.
Note "srcACLs" has "UserName:Allow:Modify, Synchronize; ", but is missing from the dstACLs.

Through a "Merged View", Touch "UserName" NTFS permissions (Adding/Removing permissions) for that specific folder "baseSrcPath", will mirror the ACL's to both the primary and secondary. 

Note: Make sure that when done you set the permission back to what the were originally.  (If you gave Modify right, then remove the modify right)

Repeat for each discrepancy found in the *.csv*.  Rerun the dswpaircheck tool to verify that the ACL's have been corrected.

Cause

To avoid this issue Always use the NDFS "Merged View" when managing permissions.  Never manage permission directly on the Secondary as this will cause the mismatch.