Link to home
Start Free TrialLog in
Avatar of AIX25
AIX25Flag for United States of America

asked on

AIX and Red Hat - Automount and ACLs

The environment is about 6 servers. I'm trying to create a centralized ACL master location, to keep all my acl files in one location. However, I want to utilize automount to make the master ACL directory on one server available across the remainder of the 5 servers. ACL and automount is not utilized in this environment, so it would be a scratch setup. Is this possible to setup? What is needed to have automount working (filesets, install)? Or is there an easier way to do this?
Avatar of gheist
gheist
Flag of Belgium image

AIX and Linux have filesystem ACLs conformant with POSIX standard.
Redhat 6 and AIX 6 supports NFSv4 to allow them to be seen over network

ACL is for file (access control list) like rwx attributes, not some access policy on TACACS server
Avatar of AIX25

ASKER

Can you give me a high level break down of how I go about setting this up? Do I need to setup anything with automounter? NFS? Any insight on this?
... Check you have some ACL in file system on some file
... export the file system
... mount
... try chacl command on client


If it is not so easy check cllient mount if it is v4 or not
Check server with rpcinfo (if v4 is served)

Read docs etc to enable missing v4 on server if needed (i think aix enables highest version already)

Remount the volume on Linux with nfsv4 flag (there are like 4 in "man nfs" alone)
Avatar of AIX25

ASKER

I want to set this up with automount on Redhat, any more details on that? I know how to NFS mount, no problem, but I'm not familiar with automounter??
ASKER CERTIFIED SOLUTION
Avatar of woolmilkporc
woolmilkporc
Flag of Germany image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I do not get why you cannot just mount NFS.... with mount command.... and enter in fstab...

automount maps are to mount same set of volumes on NIS-network etc... having them on each system is a plain burden compared to NFS....

ACL and NFSv4 are defaults on RHEL6 and AIX6
Avatar of AIX25

ASKER

@gheist. I'm going to create a master repository location of ACLs on one server that I want to make ACL FS available across all other servers in the environment. Do you have a better way to do this? Please let me know.
ACLs like permissions are attached to files... Thus central location is filesystem itself...
You can share mount configuration (automounts) and user configuration via LDAP (even Active Directory can do it)
Avatar of AIX25

ASKER

Ok, I'm kind of understanding what you mean. Should I open another question to have you explain this in a more high level. Not sure how I would integrate UNIX ACLs with LDAP or Acitive Directory? Or, is the current setup I'm going with good?
Access list contains permissions and UIDs. You can serve UID and mount point config from NIS, LDAP, etc... check graphic config tools on your system