topic Re: Are there any ways to restrict hosts to access CIFS shares? Or, If it is necessary at all? in ONTAP Discussions

Are there any ways to restrict hosts to access CIFS shares? Or, If it is necessary at all?

heightsnj — Wed, 07 Sep 2016 21:43:29 GMT

We can authenticate users to access CIFS shares by AD. However, are there any ways to allow a certain of serers to access shares? Or if there are such needs at all?

Thanks!

Re: Are there any ways to restrict hosts to access CIFS shares? Or, If it is necessary at all?

SeanHatfield — Wed, 07 Sep 2016 22:17:50 GMT

You can use export policies:

https://library.netapp.com/ecmdocs/ECMP1141094/html/GUID-8B4CEBB7-7054-48FD-A98D-5C10E1F01436.html

It's usually disabled by default for CIFS:

https://library.netapp.com/ecmdocs/ECMP1196891/html/GUID-08D59527-AFC2-4237-9BAE-4FB7C8A90E0F.html

Re: Are there any ways to restrict hosts to access CIFS shares? Or, If it is necessary at all?

bhorner — Wed, 06 Sep 2017 15:24:14 GMT

You may also want to look into Dynamic Access Control:

https://library.netapp.com/ecmdocs/ECMP1610207/html/GUID-4AD94DBE-ADF9-404D-A03F-E4BFC399AB48.html

you can then apply AD policies with an AND operator such as a particular user has to also be on a particular machine to access a share.