A.10 Verifying and Syncing ACLs (Inherited Rights Filter (IRF) and Trustees) from DST Primary Volume to Shadow Volume

python dst_verify_resync_trustee.py <OPTIONS>

Verifies and syncs the ACLs only from the DST primary volume to shadow volume. Any difference in ACLs on DST volume pair is captured in the log file. This utility is located in the /opt/novell/ncpserv/sbin directory. It can be used with both eDirectory and AD trustees.

OPTIONS  

-v, --verify

Verifies the difference in ACLs on the DST shadow volume compared to primary volume. If there is a difference in ACLs, the information is captured in the log file.

-s, --sync

Syncs the trustee rights from DST primary volume to shadow volume.

-n, --ncpcon

Obtains all DST volume pairs available on the server. This option is used only with the verify, sync or both verify and sync options.

--volumes=

Specify the DST primary volume name. For multiple volumes, specify the primary volume names with space separated. For example:

--volumes=VOL1 VOL2 VOL3

This option is used only with the verify, sync or both verify and sync options.

NOTE:If both -n and --volumes are used in a command, the -n option takes the priority.

-L, --LONG

Ignores case when comparing the file names on DST primary and shadow volumes.

--logfile=

Specify the path of log file along with the file name. If this option is not specified, the log file is generated in the current working directory.

-d, --debug

Prints the debug logs.

-h, --help

Displays the help information.

EXAMPLES  

python dst_verify_resync_trustee.py --verify --logfile=var/log/dst.log --volumes=VOL1 VOL2 VOL3

Verifies the ACLs from DST primary volumes VOL1, VOL2, VOL3 to their corresponding shadow volumes and the difference in ACL is captured in the var/log/dst.log file.

python dst_verify_resync_trustee.py --verify --sync --volumes=VOL1 VOL2 VOL3

Verifies and syncs the ACLs from DST primary volumes VOL1, VOL2, VOL3 to their corresponding shadow volumes.

python dst_verify_resync_trustee.py --verify --sync --volumes=VOL1

Verifies and syncs the ACLs from DST primary volume VOL1 to its shadow volume.

In this example, the rights of user1 on the DST primary volume (VOL1) are RWFMA and the rights of user1 on shadow volume (VOL1_SHADOW) are RWF.

After successful execution of the command, the rights of user1 on the DST primary volume (VOL1) are RWFMA and the rights of user1 on shadow volume (VOL1_SHADOW) are RWFMA.

python dst_verify_resync_trustee.py --verify --sync --ncpcon

Verifies and syncs the ACLs on all DST volume pairs on the server.