PRIMECLUSTER Global Disk Services Configuration and Administration Guide 4.1 (Solaris(TM) Operating System)
Contents PreviousNext

Chapter 1 Function> 1.3 Functions for High Manageability

1.3.5 Access Control

GDS provides the following access control functions to prevent data damage from events such as an improper operation by the user.

Class Scope

In order to manage a disk unit with GDS, it must be registered with a certain class.

A class is like a container that holds multiple disks.

By defining the class attribute called "scope", the user can specify which node set has access, or can perform operation on the disks registered to that class. Since operation on the disk is restricted to the nodes you specify, there is no risk of changing the configuration by mistake, or losing data consistency.

Suppose there are disks connected to two nodes; node A and B. The administrator wants node A to have access to some of the disks, while node B has access to the remaining disks.

In this case, two classes should be created to separately manage the disks shared by node A and B. This ensures that access by the node that is not selected in the class scope is restricted.


[Figure: Class Scope]


Starting and Stopping Volume

GDS's logical volume can be started or stopped for each node sharing the volume.

Since a stopped volume cannot be accessed from the node, there is no risk of losing data consistency by mistake.


[Figure: Starting and Stopping Volume]


Access Mode

Logical volume has an attribute called "Access mode", which can be defined for each node sharing the volume. There are two access modes; "Read and write possible" mode, and "Read only possible" mode. For example, if a certain node will access the logical volume to create data backup, set the mode "Read only possible". That way, you can prevent writing to the volume by mistake.


[Figure: Access Mode]


Lock Volume

When the node or cluster application is activated, logical volume starts automatically and becomes accessible. Likewise, when the cluster application is terminated, logical volume will also stop. This prevents a node with terminated application from accessing the logical volume. However, rebooting a node could result in starting the volume. In order to preclude the logical volume from starting in such a situation, the user can define the "Lock volume" attribute. When "Lock volume" is selected, volume will not be activated even when the node is rebooted, or cluster application activated.


[Figure: Lock Volume]



Contents PreviousNext

All Rights Reserved, Copyright(C) FUJITSU LIMITED 2005