Environment
Novell File Management Suite Dynamic File Services
Situation
Novell Dynamic File Services v2.1, ACL's differ on the Secondary from the Primary.
Resolution
Run the following command in a Command Prompt window"
Open the file with Microsoft Excel.
It will contain the following columns:
Foldername
baseSrcPath
srcAttributes
srcACLs
baseDstPath
dstAttributes
dstACLs
In Column "H" Create header "True/False". Compare columns D "srcACLs " and G "dstACLs" using the following formula "=IF(D2=G2,0,1)"
If the contents of "srcACLs " and "dstACLs" differ, the cell will have the value of 1, if they are the same then the cell will have the value of 0.
Example where ACL's appear to have mirror incorrectly.
======================================
srcACLs:
UserName:Allow:Modify, Synchronize; <<<<<-------------
Dynamic File Services Storage Rights:Allow:FullControl;
SYSTEM:Allow:FullControl;
FSAdmin:Allow:FullControl;
Administrators:Allow:FullControl
======================================
dstACLs:
Dynamic File Services Storage Rights:Allow:FullControl;
SYSTEM:Allow:FullControl;
FSAdmin:Allow:FullControl;
Administrators:Allow:FullControl
======================================
Note ";" semi-colon as the delimiter.
Note "srcACLs" has "UserName:Allow:Modify, Synchronize; ", but is missing from the dstACLs.
Through a "Merged View", Touch "UserName" NTFS permissions (Adding/Removing permissions) for that specific folder "baseSrcPath", will mirror the ACL's to both the primary and secondary.
Note: Make sure that when done you set the permission back to what the were originally. (If you gave Modify right, then remove the modify right)
Repeat for each discrepancy found in the *.csv*. Rerun the dswpaircheck tool to verify that the ACL's have been corrected.
C:\Program Files\Dynamic File Services>dswpaircheck -pair="PairName" -folders -csv="PairName-folders.csv"The output of this command will create a file. In this case "PairName-folder.csv".
Open the file with Microsoft Excel.
It will contain the following columns:
Foldername
baseSrcPath
srcAttributes
srcACLs
baseDstPath
dstAttributes
dstACLs
In Column "H" Create header "True/False". Compare columns D "srcACLs " and G "dstACLs" using the following formula "=IF(D2=G2,0,1)"
If the contents of "srcACLs " and "dstACLs" differ, the cell will have the value of 1, if they are the same then the cell will have the value of 0.
Example where ACL's appear to have mirror incorrectly.
======================================
srcACLs:
UserName:Allow:Modify, Synchronize; <<<<<-------------
Dynamic File Services Storage Rights:Allow:FullControl;
SYSTEM:Allow:FullControl;
FSAdmin:Allow:FullControl;
Administrators:Allow:FullControl
======================================
dstACLs:
Dynamic File Services Storage Rights:Allow:FullControl;
SYSTEM:Allow:FullControl;
FSAdmin:Allow:FullControl;
Administrators:Allow:FullControl
======================================
Note ";" semi-colon as the delimiter.
Note "srcACLs" has "UserName:Allow:Modify, Synchronize; ", but is missing from the dstACLs.
Through a "Merged View", Touch "UserName" NTFS permissions (Adding/Removing permissions) for that specific folder "baseSrcPath", will mirror the ACL's to both the primary and secondary.
Note: Make sure that when done you set the permission back to what the were originally. (If you gave Modify right, then remove the modify right)
Repeat for each discrepancy found in the *.csv*. Rerun the dswpaircheck tool to verify that the ACL's have been corrected.
Cause
To avoid this issue Always use the NDFS "Merged View" when managing permissions. Never manage permission directly on the Secondary as this will cause the mismatch.