none

[openafs-wiki.git] / AFSLore / UsageFAQ.mdwn

diff --git a/AFSLore/UsageFAQ.mdwn b/AFSLore/UsageFAQ.mdwn
index 0670616..3598f84 100644 (file)
--- a/AFSLore/UsageFAQ.mdwn
+++ b/AFSLore/UsageFAQ.mdwn
@@ -28,6 +28,7 @@ The Usage Section of the [[AFSFrequentlyAskedQuestions]].
         <li><a href="#2.18  Can I klog as two users on"> 2.18 Can I klog as two users on a machine in the same cell?</a></li>
         <li><a href="#2.19  What are the ~/._afsXXXX f"> 2.19 What are the ~/.__afsXXXX files?</a></li>
         <li><a href="#2.20  How do you set up IP-based"> 2.20 How do you set up IP-based ACLs?</a></li>
+        <li><a href="#2.21 What meaning do the owner,"> 2.21 What meaning do the owner, group, and mode bits have in AFS?</a></li>
       </ul>
     </li>
   </ul>
@@ -58,7 +59,7 @@ AFS provides access control lists to give more precise control to users wishing
 
 **File permissions:** [ User ]
 
-Unix mode bits for group and other are ignored. The mode bits for the file owner don't work the way they used to.
+Unix mode bits for group and other are ignored. The mode bits for the file owner don't work the way they used to. See also question 2.21.
 
 Users should protect their AFS files with (directory) ACLs only. Just use mode bits to make a file executable.
 
@@ -459,6 +460,32 @@ Newer versions of AFS rename such files to .\_\_afsXXXX, thus making sure that t
 
 ### <a name="2.20  How do you set up IP-based"></a> 2.20 How do you set up IP-based ACLs?
 
-See <http://www.duke.edu/~jhv/answers/afs-ip-acls.html> and [[IPAccessControl]].
+See [[IPAccessControl]].
 
-[http://www.gsyb.com 压力表] [http://www.shop263.com/i-410/1.htm 活性炭] [http://www.shop263.com/i-410/2.htm 火柴专用胶] [http://www.shop263.com/i-410/3.htm 基准试剂] [http://www.shop263.com/i-410/4.htm 甲基庚烯酮] [http://www.shop263.com/i-410/5.htm 甲基乙烯酮] [http://www.shop263.com/i-410/6.htm 钾明矾] [http://www.shop263.com/i-410/7.htm 酵母抽提物] [http://www.shop263.com/i-410/8.htm 精炼油] [http://www.shop263.com/i-410/9.htm 精酶] [http://www.shop263.com/i-410/10.htm 精细化学品] [http://www.shop263.com/i-410/11.htm 酒石酸] [http://www.shop263.com/i-410/12.htm 聚丙烯酰胺] [http://www.shop263.com/i-410/13.htm 聚合物添加剂] [http://www.shop263.com/i-410/14.htm 抗氧化剂] [http://www.shop263.com/i-410/15.htm 抗氧化剂TBHQ] [http://www.shop263.com/i-410/16.htm 抗氧化剂特丁基对苯二酚] [http://www.shop263.com/i-410/17.htm 昆仑酶] [http://www.shop263.com/i-410/18.htm 昆仑酶003A] [http://www.shop263.com/i-410/19.htm 昆仑酶004A] [http://www.shop263.com/i-410/20.htm 辣椒红色素] [http://www.shop263.com/i-410/21.htm 冷制品] [http://www.shop263.com/i-410/22.htm 邻苯基苯酚] [http://www.shop263.com/i-410/23.htm 磷酸脲] [http://www.shop263.com/i-410/24.htm 硫酸镁] [http://www.shop263.com/i-410/25.htm 硫酸铜] [http://www.shop263.com/i-410/26.htm 硫酸亚铁] [http://www.shop263.com/i-410/27.htm 柳酸甲酯] [http://www.shop263.com/i-410/28.htm 六偏磷酸钠] [http://www.shop263.com/i-410/29.htm 氯丙酸] [http://www.shop263.com/i-410/30.htm 氯化胆碱] [http://www.shop263.com/i-410/31.htm 氯氰碘柳胺] [http://www.shop263.com/i-410/32.htm 氯氰碘柳胺钠] [http://www.shop263.com/i-410/33.htm 没食子酸丙酯] [http://www.shop263.com/i-410/34.htm 面包素] [http://www.shop263.com/i-410/35.htm 明矾] [http://www.shop263.com/i-410/36.htm 明胶] [http://www.shop263.com/i-410/37.htm 柠檬酸] [http://www.shop263.com/i-410/38.htm 柠檬酸钙] [http://www.shop263.com/i-410/39.htm 柠檬酸钾] [http://www.shop263.com/i-410/40.htm 柠檬酸镁] [http://www.shop263.com/i-410/41.htm 柠檬酸钠] [http://www.shop263.com/i-410/42.htm 柠檬酸苹果酸钙] [http://www.shop263.com/i-410/43.htm 柠檬酸盐] [http://www.shop263.com/i-410/44.htm 泡打粉] [http://www.shop263.com/i-410/45.htm 山梨酸钾] [http://www.shop263.com/i-410/46.htm 山梨酸盐] [http://www.shop263.com/i-410/47.htm 砷酸] [http://www.shop263.com/i-410/48.htm 生化试剂] [http://www.shop263.com/i-410/49.htm 生物工程产品] [http://www.shop263.com/i-410/50.htm 生育酚] [http://www.shop263.com/i-410/51.htm 石油化工催化剂] [http://www.shop263.com/i-410/52.htm 食品级] [http://www.shop263.com/i-410/53.htm 食品配料] [http://www.shop263.com/i-410/54.htm 食品添加剂] [http://www.shop263.com/i-410/55.htm 食品用香精] [http://www.shop263.com/i-410/56.htm 食用酒精] [http://www.shop263.com/i-410/57.htm 薯蓣皂素] [http://www.shop263.com/i-410/58.htm 双烯醇酮醋酸酯] [http://www.shop263.com/i-410/59.htm 水果蔬菜保鲜剂] [http://www.shop263.com/i-410/60.htm 水溶性药物包衣材料] [http://www.shop263.com/i-410/61.htm 水杨酸] [http://www.shop263.com/i-410/62.htm 饲料级] [http://www.shop263.com/i-410/63.htm 饲料添加剂] [http://www.shop263.com/i-410/64.htm 羧甲基纤维素钠CMC] [http://www.shop263.com/i-410/65.htm 碳酸钡] [http://www.shop263.com/i-410/66.htm 碳酸钙] [http://www.shop263.com/i-410/67.htm 碳酸镁] [http://www.shop263.com/i-410/68.htm 碳酸盐] [http://www.shop263.com/i-410/69.htm 无水磷酸氢二钠] [http://www.shop263.com/i-410/70.htm 无水磷酸三钠] [http://www.shop263.com/i-410/71.htm 无水柠檬酸] [http://www.shop263.com/i-410/72.htm 烯炔醇] [http://www.shop263.com/i-410/73.htm 香甜泡打粉] [http://www.shop263.com/i-410/74.htm 橡胶助剂] [http://www.shop263.com/i-410/75.htm 硝酸钡] [http://www.shop263.com/i-410/76.htm 畜禽生物技术产品] [http://www.shop263.com/i-410/77.htm 畜禽药品] [http://www.shop263.com/i-410/78.htm 选矿药剂] [http://www.shop263.com/i-410/79.htm 烟酰胺] [http://www.shop263.com/i-410/80.htm 颜料] [http://www.shop263.com/i-410/81.htm 氧化锌] [http://www.shop263.com/i-410/82.htm 叶黄素] [http://www.shop263.com/i-410/83.htm 液体硫酸铝] [http://www.shop263.com/i-410/84.htm 一水柠檬酸] [http://www.shop263.com/i-410/85.htm 医药级] [http://www.shop263.com/i-410/86.htm 医药原料] [http://www.shop263.com/i-410/87.htm 异植物醇] [http://www.shop263.com/i-410/88.htm 益生素] [http://www.shop263.com/i-410/89.htm 有机硅] [http://www.shop263.com/i-410/90.htm 有机试剂] [http://www.shop263.com/i-410/91.htm 玉米超氧化物岐化酶] [http://www.shop263.com/i-410/92.htm 指示剂] [http://www.shop263.com/i-410/93.htm 着色剂] [http://www.shop263.com/i-410/94.htm 色素色淀] [http://www.shop263.com/i-410/95.htm 山苍子油] [http://www.shop263.com/i-410/96.htm 山梨酸钙] [http://www.shop263.com/i-410/97.htm 生物添加剂] [http://www.shop263.com/i-410/98.htm 泛醇] [http://www.shop263.com/i-410/99.htm 生物素] [http://www.shop263.com/i-410/100.htm 半胱氨酸碱] [http://www.shop263.com/i-410/101.htm 丙氨酸] [http://www.shop263.com/i-410/102.htm 精氨酸] [http://www.shop263.com/i-410/103.htm 精氨酸盐酸盐] [http://www.shop263.com/i-410/104.htm 天冬酰胺水合物] [http://www.shop263.com/i-410/105.htm 天门冬氨酸] [http://www.shop263.com/i-410/106.htm NPK复混肥] [http://www.shop263.com/i-410/107.htm PVP系列] [http://www.shop263.com/i-410/108.htm 氨基酸] [http://www.shop263.com/i-410/109.htm 氨基乙酸] [http://www.shop263.com/i-410/110.htm 铵明矾] [http://www.shop263.com/i-410/111.htm 按叶油] [http://www.shop263.com/i-410/112.htm 巴豆醛] [http://www.shop263.com/i-410/113.htm 白砂糖] [http://www.shop263.com/i-410/114.htm 保健食品] [http://www.shop263.com/i-410/115.htm 保鲜剂] [http://www.shop263.com/i-410/116.htm 焙烤食品] [http://www.shop263.com/i-410/117.htm 苯甲酸] [http://www.shop263.com/i-410/118.htm 苯甲酸钾] [http://www.shop263.com/i-410/119.htm 苯甲酸钠] [http://www.shop263.com/i-410/120.htm 苯氯化产品] [http://www.shop263.com/i-410/121.htm 苯乙醇] [http://www.shop263.com/i-410/122.htm 表面活性剂] [http://www.shop263.com/i-410/123.htm 冰片] [http://www.shop263.com/i-410/124.htm 丙氨酸] [http://www.shop263.com/i-410/125.htm 丙氨酰] [http://www.shop263.com/i-410/126.htm 超临界] [http://www.shop263.com/i-410/127.htm 超氧化物歧化酶SOD] [http://www.shop263.com/i-410/128.htm 赤砂糖] [http://www.shop263.com/i-410/129.htm 醋酸钠] [http://www.shop263.com/i-410/130.htm 碘醚柳胺] [http://www.shop263.com/i-410/131.htm 电子化学品] [http://www.shop263.com/i-410/132.htm 动物饲料添加剂] [http://www.shop263.com/i-410/133.htm 豆粕] [http://www.shop263.com/i-410/134.htm 豆油] [http://www.shop263.com/i-410/135.htm 对虾饵料添加剂] [http://www.shop263.com/i-410/136.htm 对硝基苯砷酸] [http://www.shop263.com/i-410/137.htm 二苯醚] [http://www.shop263.com/i-410/138.htm 泛酸钙] [http://www.shop263.com/i-410/139.htm 复合氨基酸] [http://www.shop263.com/i-410/140.htm 复合肥] [http://www.shop263.com/i-410/141.htm 果蔬保鲜剂] [http://www.shop263.com/i-410/142.htm 甘氨酸] [http://www.shop263.com/i-410/143.htm 甘氨酸铝锆] [http://www.shop263.com/i-410/144.htm 甘氨酸衍生物] [http://www.shop263.com/i-410/145.htm 肝素] [http://www.shop263.com/i-410/146.htm 高纯试剂] [http://www.shop263.com/i-410/147.htm 高蛋白饲料] [http://www.shop263.com/i-410/148.htm 高分子材料] [http://www.shop263.com/i-410/149.htm 工业防霉剂] [http://www.shop263.com/i-410/150.htm 谷氨酰胺] [http://www.shop263.com/i-410/151.htm 骨胶] [http://www.shop263.com/i-410/152.htm 固体硫酸铝] [http://www.shop263.com/i-410/153.htm 合成樟脑粉] [http://www.shop263.com/i-410/154.htm 胡萝卜素] [http://www.shop263.com/i-410/155.htm 花生油] [http://www.shop263.com/i-410/156.htm 化学试剂] [http://www.shop263.com/i-410/157.htm 黄原胶] [http://www.shop263.com/i-410/158.htm 茴脑] [http://www.shop263.com/i-410/159.htm 糖果] [http://www.shop263.com/i-410/160.htm 特丁基对苯二酚] [http://www.shop263.com/i-410/161.htm 天门冬氨酸] [http://www.shop263.com/i-410/162.htm 天然薄荷脑] [http://www.shop263.com/i-410/163.htm 天然食品着色剂] [http://www.shop263.com/i-410/164.htm 透明质酸] [http://www.shop263.com/i-410/165.htm 脱水明矾] [http://www.shop263.com/i-410/166.htm 维生素A] [http://www.shop263.com/i-410/167.htm 维生素AD3粉] [http://www.shop263.com/i-410/168.htm 维生素A油醋酸酯] [http://www.shop263.com/i-410/169.htm 维生素B] [http://www.shop263.com/i-410/170.htm 维生素B3] [http://www.shop263.com/i-410/171.htm 维生素D3油] [http://www.shop263.com/i-410/172.htm 维生素E] [http://www.shop263.com/i-410/173.htm 维生素烟酰胺] [http://www.shop263.com/i-410/174.htm 文化用纸] [http://www.shop263.com/i-410/175.htm 无机试剂] [http://www.shop263.com/i-410/176.htm 无水磷酸二氢钠] [http://www.shop263.com/i-410/177.htm 无水磷酸氢二钾] [http://www.shop263.com/i-410/178.htm 苹果酸] [http://www.shop263.com/i-410/179.htm 苹果酸钙] [http://www.shop263.com/i-410/180.htm 苹果酸盐] [http://www.shop263.com/i-410/181.htm 葡萄糖] [http://www.shop263.com/i-410/182.htm 岐化酶] [http://www.shop263.com/i-410/183.htm 氢氧化铝] [http://www.shop263.com/i-410/184.htm 轻质碳酸钙] [http://www.shop263.com/i-410/185.htm 氰化产品] [http://www.shop263.com/i-410/186.htm 肉碱] [http://www.shop263.com/i-410/187.htm 乳制品] [http://www.shop263.com/i-410/188.htm 三甲基氢醌] [http://www.shop263.com/i-410/189.htm 三氧化二锑] [http://www.shop263.com/i-410/190.htm 色氨酸]
+### <a name="2.21 What meaning do the owner,"></a><a name="2.21 What meaning do the owner, "></a> 2.21 What meaning do the owner, group, and mode bits have in AFS?
+
+In order to appear more like a local filesystem, AFS will faithfully store the numeric UID (owner), GID (group), and permission bits (read, write, and execute for user, group, and other), as well as the setuid, setgid, and sticky bits. For the most part, these values are simply recorded and reported back when requested. However, in some instances the fileserver and/or cache manager will make access control decisions based in part on these values.
+
+The following is believed to be a complete list of those circumstances. Below, "owner" refers to the user whose numeric pts identity is equal to the owner of the file or directory.
+
+- implicit ACLs
+  - the owner of the root directory of a volume has implicit administer (a) rights on all directories in the volume
+  - the owner of a file has implicit read (r) and write (w) rights on a file if that user has insert (i) rights on its parent directory
+- to **read** from a file you must have read (r) rights _and_ at least one of the following must be true:
+  - the file's u+r (user read) bit is set
+  - you are the owner of the file
+  - you are a member of system:administrators
+- to **write** to a file you must have write (w) rights _and_ at least one of the following must be true:
+  - the file's u+w (user write) bit is set
+  - you are the owner of the file
+  - you are a member of system:administrators
+
+- changing mode bits and owner/group:
+  - the fileserver will only allow the mode bits on a file (ugo+rwx) to be changed if the user has write (w) and lookup (l) rights on file's parent directory.
+  - the fileserver will only allow the mode bits on a directory to be changed if the user has delete (d) insert (i) and lookup (l) rights on the directory.
+  - only members of system:administrators can change the owner or group of a file.
+  - only members of system:administrators can change the setuid and setgid bits on a file.
+
+The sticky bit, group of a file, g+rwx, and o+rwx bits are completely ignored by all AFS components. Additionally, the u+rwx bits are ignored on directories.
+
+Newly created files and directories are given an owner numerically equal to the pts identity of the user who created the file or directory. Initial mode bits are assigned by the AFS cilent, typically based on the creating user's umask.