HP-UX Limitations

The ACL of HP‑UX is limited in how it can reflect the ACL of CA Access Control.

In HP‑UX, the ACL assigns access per user and group combination. That is, the assigned access applies to the specified user only when the user's primary group is also specified.
CA Access Control, on the other hand, assigns access per user or per group, but not per combination.

Accordingly, CA Access Control permissions are mapped to HP‑UX user/group combinations in which either the user or the group is set to the equivalent of “*” or “any.”
HP‑UX does not support ACLs on file‑systems that are under control of the volume manager (LVM). Thus, some important HP‑UX machines are likely to allow ACL synchronization only on the “root” file‑system.
The ACL of HP‑UX is limited to 16 entries. CA Access Control synchronization uses the available entries as efficiently as possible, but 16 entries may not be enough to reflect every CA Access Control ACL completely.