How to Migrate Data & Folder Permissions between QTS and QuTS hero with HBS3

Folder permissions are used to authorize users who access specific resources on the network (such as data files, applications, printers and scanners). Administrators of a QNAP NAS can set several folder permissions for individual user access. IT staff can also join their NAS to an Active Directory for centralized management.

This tutorial will explain how administrators can migrate folder permissions between QTS or QuTS hero using HBS3.

Note: QNAP NAS does not currently support migrating folder permissions between QTS/QuTS hero systems when the QTS/QuTS hero is set as a domain controller after the other QNAP NAS joins.

• Migrating NAS folder permissions between two QTS systems
  • QTS to QTS general arrangement
• Migrating NAS folder permissions between QTS and QuTS hero systems
  • QTS to QuTS hero general arrangement
• Migrating folder permissions between QTS and QuTS hero systems when NAS has been joined to AD or LDAP
  • QTS to QuTS hero which are joined to Active Directory or LDAP general arrangement

Checking User UID in SSH

You can use this method to make sure your NAS users have been created in the same sequence. This will ensure that permissions are migrated successfully.

1. Open an SSH application.
2. Enter “ssh admin@your ip”
3. Enter your NAS password
4. Confirm that you want to continue connecting.
   
5. Enter “id your NAS user”.
   Your user UID is displayed.
   

Migrating NAS folder permissions between two QTS systems

1. Both NAS must have the same users in the same sequence.
   Go to Control Panel > Users on both NAS. Confirm that both NAS have identical users.
   
   Tip: You can export/import users to/from a NAS by clicking Create > Import/Export Users (.bin file)
   

   Tip: Migrating folder permissions is linked to NAS user UID. To check a user UID, see Checking User UID in SSH.

2. Make sure both your NAS share folders have been created and assigned the same folder permissions. (NAS users).Go to Control Panel > Share Folders.
3. Choose the share folder to migrate.
4. Click to edit share folder permissions.
   
5. Select the permissions to migrate. Follow the below configuration:
   Enable Advanced Folder Permissions (POSIX): NAS folder permissions
   Enable Windows ACL support (NT): Windows folder permissions
   (Only QTS need to set.)
   Go to Control Panel > Privilege > Shared Folders > Advanced Permissions.
   
   
6. Create a HBS3 job.
7. Choose Replicate ACL and extended attributes.
   
8. Files and folder permissions will be migrated.
   

QTS to QTS general arrangement

Source and destination needed to select permissions

• Advanced Folder Permissions (POSIX): NAS folder permissions
• Windows ACL support (NT): Windows folder permissions
• O : User permissions migrated
• X : User permissions not migrated

For example, if both your source and destination NAS’s setting are POSIX on and NT on, then the result is POSIX O and NT O.

Migrating NAS folder permissions between QTS and QuTS hero systems

QTS and QuTS hero use different underlying Linux systems. QTS uses POSIX ACL and NT ACL, but QuTS hero uses Richacl. So, if you want to migrate files and folder permissions from QTS to QuTS hero and select both POSIX ACL and NT ACL in QTS, a conflict may occur. HBS3 features a rule for migrating folder permissions between QTS and QuTS hero systems.

Synchronization currently only supports RTRR/Rsync jobs, backup only supports cloud jobs.

1. Both NAS must have the same users in the same sequence.
   Go to Control Panel > Users on both NAS. Confirm that both NAS have identical users.
   
   Tip: You can export/import users to/from a NAS by clicking Create > Import/Export Users (.bin file)
   
   Tip: Migrating folder permissions is linked to NAS user UID. To check a user UID, see Checking User UID in SSH.
2. Make sure both your NAS share folders have been created and assigned the same folder permissions.(NAS users).
3. Go to Control Panel > Share Folders.
4. Choose a share folder to migrate.
5. Click to edit share folder permissions.
   
6. Select the permissions to migrate. Follow the below configuration:
   Enable Advanced Folder Permissions (POSIX): NAS folder permissions
   Enable Windows ACL support (NT): Windows folder permissions
   (Only QTS need to set.)
   Go to Control Panel > Privilege > Shared Folders > Advanced Permissions.
   
   
7. Create a HBS3 job.
8. Choose Replicate ACL and extended attributes.
   
   Files and folder permissions will be migrated.
   

QTS to QuTS hero general arrangement

QTS needs the following permissions

• Advanced Folder Permissions (POSIX): NAS folder permissions
• Windows ACL support (NT): Windows folder permissions
• O : User permissions migrated
• X : User permissions not migrated

Note: Synchronization currently only supports RTRR/Rsync jobs, backup only supports cloud jobs.

For example, if your QTS configuration has both POSIX ACL and NT ACL enabled before syncing with QuTS hero, there might be a conflict, so as a rule HBS3 only migrates NT ACL.

For example, when you backup QTS to cloud and restore from cloud to QuTS hero. QTS configuration with both POSIX ACL and NT ACL enabled before backing up to cloud, then only NT ACL will restore to QuTS hero.

Note: Cloud can backup POSIX ACL and NT ACL. If your destination is QTS then restore both POSIX ACL and NT ACL. Advanced Permission must be enabled in the destination QTS system.
Note: Cloud does not support sync job ACL migration.

Migrating folder permissions between QTS and QuTS hero systems when NAS has been joined to AD or LDAP

1. Both NAS must be joined to your Windows AD or LDAP.
   Go to Control Panel > Privilege > Domain Security.
   Select AD authentication (domain members) or LDAP authentication
   
2. Make sure both your NAS share folders have been created and assigned the same folder permissions. (Domain users).
3. Go to Control Panel > Share Folders.
4. Choose a share folder to migrate.
5. Click to edit share folder permissions (Domain users).
   
6. Select which permissions to migrate. Follow the below configuration:
   Enable Advanced Folder Permissions (POSIX): NAS folder permissions
   Enable Windows ACL support (NT): Windows folder permissions
   (Only QTS need to set.)
   Go to Control Panel > Privilege > Shared Folders > Advanced Permissions
   
   
7. Create a HBS3 job.
8. Choose Replicate ACL and extended attributes.
   
9. Files and folder permissions will be migrated.
   

QTS to QuTS hero which are joined to Active Directory or LDAP general arrangement

QTS needs the following permissions

1. Advanced Folder Permissions (POSIX): NAS folder permissions
2. Windows ACL support (NT): Windows folder permissions
3. O : User permissions migrated
4. X : User permissions not migrated

For example, if your QTS configuration enables both POSIX ACL and NT ACL before syncing to QuTS hero, a conflict may occur, so as a rule HBS3 only migrates NT ACL.