Other Topic Library Versions

Enable Access Control Lists on the K2 system

  • The K2 system must have current compatible versions of the Windows operating system and SNFS software.
  • The K2 system must have standard C:, D:, E: and V: disk volumes.
  • SNFS must be configured with Grass Valley's Storage Utility.
  • The SNFS configuration file must be located in the D:\SNFS\config\ directory.

If desired, you can enable Access Control Lists (ACLs). For SAN access enable ACLs on the K2 Media Server(s). For stand-alone K2 storage access enable ACLs on the stand-alone K2 system. If you do this task, you must also configure Active Directory Domain on the Macintosh systems.

  1. If a redundant K2 SAN, take FSM K2 Media Servers out of service and manage redundancy as directed in documented procedures.
  2. Navigate to D:\SNFS\config\ and open the SNFS configuration file in a text editor. The file is named either default.cfg or gvfs_hostname.cfg where hostname is the name of the K2 system—if a redundant SAN, the name of the primary FSM.
  3. Confirm/enter/modify text lines as necessary to configure as follows:
    
    WindowsSecurity Yes
    EnforceACLs Yes
    UnixIdFabricationOnWindows Yes
    UnixDirectoryCreationModeOnWindows 0700
    UnixFileCreationModeOnWindows 0600
    UnixNobodyGidOnWindows 60001
    UnixNobodyUidOnWindows 60001
    Avoid duplicate settings.
    Note: Once ACLs are enabled on the K2 system (WindowsSecurity set to Yes), they cannot be disabled.
  4. Save the SNFS configuration file.
  5. Restart the K2 system.
  6. If a redundant K2 SAN, repeat these steps on the redundant FSM K2 Media Server.
  7. After restart of K2 Media Server(s) is complete, restart all clients of the K2 SAN.

Copyright © 2019 Grass Valley Canada. All rights reserved. K2 Summit 10.1.2 gvtp_20191213_00:21:37