SYMACL (Symmetrix Access Control) is a product of EMC which is used for authorizing and monitoring the rights of various SYMAPI servers which are used to control Symmetrix/VMAX3 storage systems. The SYMAPI servers are monitored on a function-specific basis, e.g. for basic functions such as information interfaces or for the TimeFinder and SRDF functions. SYMACL enables rights to be defined and monitored on an individual SYMAPI server basis for each individual device or for complete device groups of the storage systems.
A detailed description of the product is provided in the documentation of EMC.
SYMACL and SHC-OSD
SYMAPI servers and SHC-OSD support SYMACL. This allows SHC-OSD to be used for storage systems which are protected with SYMACL.
Multiple SYMAPI servers can exist. The connected SYMAPI server has a unique host ID. The different rights for the connected SYMAPI server are defined using SYMACL on the basis of this ID. Each action which is sent from the connected SYMAPI server to the storage system which is protected using SYMACL also contains the ID, thus enabling SYMACL to check the SYMAPI server’s authorization.
When a storage system is protected with SYMACL and the SYMAPI server used is not authorized to perform a particular management action, SHC-OSD commands are rejected with the return code NDE1018
.
SYMACL itself runs on an external server.
Outputting the unique host ID
The SHC-OSD command /SHOW-SHC-PROCESSING
outputs the unique host ID of the connect SYMAPI server. This changes when the SYMAPI server changes.
Example
% ... % UNIQUE-HOST-ID = AAAAAAAA-BBBBBBBB-CCCCCCCC (SYMACL) % ...