CIFS Administration Windows 2000

Data ONTAP Fundamentals

Objectives

At the end of this module, you will be able to:

List the prerequisites for running CIFS setup Run cifs setup to configure the storage appliance Explain the relationship between directories on the storage appliance and access to them from user machines Describe the options and required specifications when creating a share Use the cifs shares command to create shares

Objectives

At the end of this module, you will be able to:

Use cifs access command to grant access to users and groups Use the command for starting and stopping CIFS services Terminate CIFS services or for specific clients Use the cifs sessions command to view users and connections Reconfigure CIFS on the storage appliance

Joining a Domain

Joining a Domain

Prerequisites
CIFS must be licensed on the storage appliance Name of the Windows 2000 domain IP addresses for up to four Windows Internet Name Services (WINS) servers (optional) Administrator name and password for the Windows domain server MultiProtocol or NTFS security style Security authentication will be Windows domain, Windows Workgroup, or UNIX password authentication

Joining a Domain
NetApp1> cifs setup Enable CIFS access to the filer by a Windows(tm) PC Your filer is currently only visible to PCs on the same net. Do you wish to make the system visible via WINS? [no]: CIFS requires local /etc/passwd and /etc/group files for multiprotocol. Default passwd file will be created containing 'root', 'pcuser', and 'nobody'. Enter the password for root []: joey Retype the password: joey The default name of this filer will be 'NetApp1'. Do you want to modify this name? [no]: CIFS supports three types of user authentication: 1. Windows Domain authentication. 2. Windows Workgroup authentication using the filer's user accounts. 3. /etc/passwd and/or NIS based authentication. What type of authentication will this filer use? [1]: The filer will use Windows Domain authentication. Enter the Windows Domain for the filer []: BASEBALL Please enter the Windows 2000 user [Administrator@BASEBALL]: Enter the password for BASEBALL\administrator []: simon34 CIFS - Logged in as administrator@BASEBALL. CIFS - Updating filer account 'cn=NetApp1,cn=computers,dc=BASEBALL' CIFS - Connecting to domain controller. Fri Mar 28 16:26:55 PST [rc:info]: Connection with \\Domaincontroller established Welcome to the BASEBALL Windows 2000(tm) domain.

CIFS local server is running.

NetApp1>

Joining a Domain - Using CIFS Setup Wizard

Joining a Domain - Using CIFS Setup Wizard

CIFS Shares

CIFS Shares Shares can be managed by using:

CLI (Command Line Interface) Windows Computer Management FilerView
NetApp1> cifs shares add webfinal /vol/vol1/webfinal

Command Line

Computer Management

CIFS Shares Commands

CIFS Shares Commands

cifs shares cifs shares webfinal

cifs shares add webfinal /vol/vol3/qtreepubs comment New web pubs maxusers 30
cifs shares change webfinal nomaxusers cifs shares delete webfinal

CIFS Access

CIFS Shares Access Access can be managed by using:

CLI (Command Line Interface) Windows Computer Management FilerView
NetApp1> cifs access eng jbrown Read NetApp1>

Liz Burkhouse:
I moved command line and computer mgmt to left side to be consistent with earlier usage (slide 13).

Command Line Command Line

Computer Management

CIFS Access

CIFS Access

NetApp1> cifs access eng engineering Full Control NetApp1> cifs shares eng Name ---eng Mount Point ----------/vol/vol1/eng EDSVCS\engineering Description ----------Eng Share / Full Control

NetApp1> cifs access eng jbrown Read

NetApp1> cifs shares eng Name ---eng Mount Point Description --------------------/vol/vol1/eng Eng Share EDSVCS\jbrown / Read EDSVCS\engineering / Full Control

NetApp1> cifs access delete Name ---eng

eng jbrown
Description ----------Eng Share / Full Control

Mount Point ----------/vol/vol1/eng EDSVCS\engineering

CIFS Services
cifs terminate [-t time] workstation cifs restart

Liz Burkhouse: Does this flash element do something or is it just used for illustration? If illust. Might be better to capture and use as graphic only.

Reconfiguring CIFS

Use cifs terminate command to disconnect users and stop CIFS service Use cifs setup command to reconfigure CIFS service
The storage appliance automatically attempts to restart the CIFS service with the new CIFS configuration.

CIFS Sessions via Command Line

NetApp1> cifs sessions Server Registers as ' NetApp1 ' in Windows 2000 domain 'EDSVCS' Filer is using en_US for DOS users Selected domain controller \\DEVDC for authentication ======================================== PC (user) #shares #files TPILLON2-L2K (EDSVCS\administrator - root) 1 0 NetApp1> cifs sessions -s users Security Information TPILLON2-L2K (EDSVCS\administrator - root) *************** UNIX uid = 0 user is a member of group daemon (1) user is a member of group daemon (1) NT membership EDSVCS\Administrator EDSVCS\Domain Users EDSVCS\Domain Admins BUILTIN\Users BUILTIN\Administrators User is also a member of Everyone, Network Users, Authenticated Users ***************

CIFS Sessions via FilerView

Topic Review
What 3 methods allow shares to be managed?
Command line Windows computer management FilerView

What 3 methods allow permissions to be managed?

Command line Windows computer management FilerView

What are some of the prerequisites for running CIFS setup

CIFS must be licensed on the storage appliance Name of the Windows 2000 domain IP addresses for up to four Windows Internet Name Services (WINS) servers (optional) Administrator name and password for the Windows domain server MultiProtocol or NTFS security style Security authentication will be Windows domain, Windows Workgroup, or UNIX password authentication

Topic Review

What command is used to configure cifs services

cifs setup

What is the command for starting and stopping CIFS services

cifs terminate cifs restart

What command is used to view users and connections

cifs sessions

Exercises