topic Re: Problem with permissions on CIFS share to Windows and Linux in ONTAP Discussions

Problem with permissions on CIFS share to Windows and Linux

TRERR — Wed, 21 Jun 2017 15:16:13 GMT

Hello,

I have a NetApp Storage in Cluster with Ontap 8.3.

   I'm having permissioning issues on some folders of a mixed volume.

   When accessed via NFS on a Linux, the system denies permission to access multiple directories.

   When accessed via CIFS by Windows, the system denies permission to access these same directories to users who have read and write permission.

   But if I access with a domain admin user, it allows access.

   I tried to look in the documentation for some command that I could execute by ssh shell, but I did not find any commands to rebuild the permissions on this volume.

What can I do to solve it? Anyone have an idea?

Thank you for any help.

Andson Gomes

Re: Problem with permissions on CIFS share to Windows and Linux

Darkstar — Fri, 23 Jun 2017 07:45:52 GMT

First, do not use "mixed" security style. Ever. It only leads to problems. Use the permission style of the majority of users/accesses. When in doubt, use NTFS. But not mixed.

Second, you need something called "user name mapping" configured on your cDOT system, where you map UNIX users to Windows users. This is a required step. You can read about it in the NFS File Access Reference Guide (here) and in the CIFS File Access Reference Guide (here). Note that it might be a bit much to take in if you're completely new to ONTAP.... Your partner that sold you the system should be able to help you with the implementation

-Michael

Re: Problem with permissions on CIFS share to Windows and Linux

Netapp_maniac — Tue, 17 Aug 2021 17:55:28 GMT

Do we need to do user name mapping when we use mixed security style volume ?

Re: Problem with permissions on CIFS share to Windows and Linux

Ontapforrum — Wed, 18 Aug 2021 16:38:11 GMT

Some reference that explains this concept nicely.

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Systems/FAS_Systems/User_unable_to_access_NFS_mount_after_migration_from_unix_to_mixed_security

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/CHMOD_in_Mixed_Mode_gives_permission_denied_error

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Systems/FAS_Systems/NFS_mount_of_a_volume_as_root_cannot_access_qtrees_that_have_Mixed_security_style

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Important_considerations_when_setting_up_CIFS_and_name-mapping_in_clustered_Data_ONTAP

Re: Problem with permissions on CIFS share to Windows and Linux

Mjizzini — Thu, 19 Aug 2021 05:07:46 GMT

You can use the vserver security file-directory ntfs command.

You can find an example in the below KB link.

Cluster Data ONTAP: How to remove "Everyone" from the file level permissions at the top level of a volume