Permission lock on folder and subdirectory for one user.

[OluSegun Babayemi]

We use Isilon OneFS 7.1.0.1, one user has always had modify access to this particular folder and its subfolders, this user can no longer write to this folder even after granting full permission.

I have restarted the pc, disconnected and re-mapped the path, modify access is still denied.
We use SMB and users are on Windows 7.

What else can I do?

[Peter Serocka]

Check the ACL directly in OneFS (CLI, command line)

ls -led "/ifs/path/to/folder"

> --
> You received this message because you are subscribed to the Google Groups "Isilon Technical User Group" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to isilon-user-gr...@googlegroups.com.
> For more options, visit https://groups.google.com/d/optout.

Peter Serocka
CAS-MPG Partner Institute for Computational Biology (PICB)
Shanghai Institutes for Biological Sciences (SIBS)
Chinese Academy of Sciences (CAS)
320 Yue Yang Rd, Shanghai 200031, China
pser...@picb.ac.cn

[Keith Nargi]

Have you given that user run as root in the share settings on Isilon? 

--
Keith 

[OluSegun Babayemi]

While running some checks here is what I noticed
I ran this command and redirected to a txt/csv file for all nodes to see the user sessions

> isi smb session list >>...txt

The standard domain user had about 5 sessions connected(ip) to Isilon but with a different username (someone from IT support).

For some reason Isilon is seeing this user as a different username who definitely does not have access to those directories and has done some administrative task for the user in the past.

I have disconnected and mapped shares with no luck.

I am looking for a command to drop those session and clear this username translation from the user pc.

User is fine when working with those shares from other pc.

[OluSegun Babayemi]

Issue resolved. I cleared record of credential manager on user pc pointing to the fileserver. IT support connected to Isilon and somehow saved credentials. All connection was using that username.

Thank you everyone.

[Alexandra Harker]

If you didn't find the commands to remove a file lock, here they are:

# isi_for_array 'isi smb openfiles list' 

Optionally, you can grep for part of the file/filename.

Once you have the ID, you can run:

# isi_for_array 'isi smb openfiles close --id=[##########] --force'

I've also had to run the command to kill a user's sessions if the file close didn't do the trick.

# isi_for_array 'isi smb sessions list'

Again, you can grep for a specific username, if it helps.

# isi_for_array 'isi smb sessions delete --computer-name=[IP] --force'

You can kill SMB sessions via user, but I've not had as much luck with it.

# isi_for_array 'isi smb sessions delete-user --[user/sid/uid]=[usernamed/sid/uid]'

Hope this helps!

[OluSegun Babayemi]

Thank you very much Harker, these commands has helped with my daily administrative tasks.