That is pretty much what I figured.  That method won't work for us since
most of this ISILON data is from Windows desktops, servers, etc. so ACL
information is crucial since DFS is the key.

Thanks for your suggestions.  We do currently use 3-standalone Windows
servers to access the data via DFS mounts but they can't handle the
workload and will probably add even more such boxes but reduce the 85+
nodes into smaller, more manageable groupings and use the GUI (via helpdesk
or the like) for restores since the web client is going away.

On Thu, Feb 8, 2018 at 10:04 AM, Skylar Thompson <skylar2 AT u.washington DOT 
edu>
wrote:

>  Content preview:  We have a few dozen Windows systems, but nothing
> complex enough
>     to require more than simple POSIX permissions. Most of those Windows
> systems
>     are instrument systems feeding an analysis pipeline and all connect
> with
>    a single user account. The regular user accounts just belong to
> standard UNIX
>     groups so don't really require ACLs to manage. [...]
>
>  Content analysis details:   (0.6 points, 5.0 required)
>
>   pts rule name              description
>  ---- ---------------------- ------------------------------
> --------------------
>   0.7 SPF_NEUTRAL            SPF: sender does not match SPF record
> (neutral)
>  -0.0 T_RP_MATCHES_RCVD      Envelope sender domain matches handover relay
>                              domain
> X-Barracuda-Connect: mx.gs.washington.edu[128.208.8.134]
> X-Barracuda-Start-Time: 1518102266
> X-Barracuda-Encrypted: ECDHE-RSA-AES256-GCM-SHA384
> X-Barracuda-URL: https://148.100.49.28:443/cgi-mod/mark.cgi
> X-Barracuda-BRTS-Status: 1
> X-Virus-Scanned: by bsmtpd at marist.edu
> X-Barracuda-Scan-Msg-Size: 1342
> X-Barracuda-Spam-Score: 0.00
> X-Barracuda-Spam-Status: No, SCORE=0.00 using global scores of
> TAG_LEVEL=3.5 QUARANTINE_LEVEL=1000.0 KILL_LEVEL=5.5 tests=
> X-Barracuda-Spam-Report: Code version 3.2, rules version 3.2.3.47714
>         Rule breakdown below
>          pts rule name              description
>         ---- ---------------------- ------------------------------
> --------------------
>
> We have a few dozen Windows systems, but nothing complex enough to require
> more than simple POSIX permissions. Most of those Windows systems are
> instrument systems feeding an analysis pipeline and all connect with a
> single user account. The regular user accounts just belong to standard UNIX
> groups so don't really require ACLs to manage.
>
> Most of the systems using the storage are Linux cluster nodes running the
> analysis pipeline over NFS.
>
> On Thu, Feb 08, 2018 at 09:44:37AM -0500, Zoltan Forray wrote:
> > So you don't have any Windows filesystems on the ISILON? You are a purely
> > Linux/Unix shop?
> >
> > On Thu, Feb 8, 2018 at 9:41 AM, Skylar Thompson <
> skylar2 AT u.washington DOT edu>
> > wrote:
> >
> > >  Content preview:  We briefly looked into doing replication, but
> trying to
> > > convince
> > >     our user base (scientists) that they should get several petabytes
> of
> > > disk
> > >     that they couldn't directly use would have been a non-starter. At
> the
> > > time
> > >     we also "only" had 10Gbps Internet connection, and sync'ing
> upwards of
> > > 50TB/day
> > >     would have consumed a substantial part of that uplink. :) [...]
>
> --
> -- Skylar Thompson (skylar2 AT u.washington DOT edu)
> -- Genome Sciences Department, System Administrator
> -- Foege Building S046, (206)-685-7354
> -- University of Washington School of Medicine
>



--
*Zoltan Forray*
Spectrum Protect (p.k.a. TSM) Software & Hardware Administrator
Xymon Monitor Administrator
VMware Administrator
Virginia Commonwealth University
UCC/Office of Technology Services
www.ucc.vcu.edu
zforray AT vcu DOT edu - 804-828-4807
Don't be a phishing victim - VCU and other reputable organizations will
never use email to request that you reply with your password, social
security number or confidential personal information. For more details
visit http://phishing.vcu.edu/