Skip to content

Commit c3646b7

Browse files
committed
adding noperm
1 parent 23cec4e commit c3646b7

File tree

1 file changed

+4
-2
lines changed

1 file changed

+4
-2
lines changed

articles/storage/files/storage-files-identity-auth-linux-kerberos-enable.md

Lines changed: 4 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -4,7 +4,7 @@ description: Learn how to enable identity-based Kerberos authentication for Linu
44
author: khdownie
55
ms.service: storage
66
ms.topic: how-to
7-
ms.date: 02/23/2023
7+
ms.date: 02/28/2023
88
ms.author: kendownie
99
ms.subservice: files
1010
---
@@ -476,7 +476,9 @@ Choose one of the following mount options to convert file permissions to DACLs o
476476

477477
- Use a default (recommended), such as **file_mode=<>,dir_mode=<>**. File permissions specified as **file_mode** and **dir_mode** are only enforced within the client. The server enforces access control based on the file's or directory's security descriptor.
478478
- Specify **modefromsid,idsfromsid** so that access control is done only on the client. The server won't enforce any access control with this mount option.
479-
- Specify **cifsacl,noperm** so permissions are visible to Linux apps and can be set, but are only enforced on the server. When using **noperm**, permission checking is only done on the server. Otherwise, permission checking is done on both the client with the mode bits and the server with the ACL. Use **cifsacl** if you want permissions to be enforced on both client and server.
479+
- Specify **cifsacl** so permissions are visible to Linux apps and can be set, and are enforced on both client and server.
480+
481+
You can also specify the **noperm** mount option if you want permission checking to only be done on the server. Otherwise, permission checking is done on both the client with the mode bits and the server with the ACL.
480482
481483
#### File ownership
482484

0 commit comments

Comments
 (0)