topic Re: Manage a Filer with a AD account without a CIFS License in Network and Storage Protocols

Manage a Filer with a AD account without a CIFS License

REALWAITE — Thu, 05 Jun 2025 06:25:25 GMT

Hi,

Is it possible to manage a filer with and AD account without a CIFS License?

We have 6 Filers and we do have a CIFS licencse for only 4. For those 4, we can use a active Directory account to manage it, but can we do the same thing for the two that do not have the licenses?

Thanks

Réal Waite

Re: Manage a Filer with a AD account without a CIFS License

scottgelb — Thu, 07 Jun 2012 21:30:32 GMT

You can still join the domain without a license and add domainusers for login...

Re: Manage a Filer with a AD account without a CIFS License

aborzenkov — Fri, 08 Jun 2012 02:25:17 GMT

Will it work also without FCP/iSCSI (i.e. pure NFS)?

Re: Manage a Filer with a AD account without a CIFS License

scottgelb — Fri, 08 Jun 2012 02:36:42 GMT

Yes. Cifs setup will run for authentication without a license.

Sent from my iPhone 4S

Re: Manage a Filer with a AD account without a CIFS License

REALWAITE — Fri, 08 Jun 2012 12:52:39 GMT

Hi Scott,

Can you tell me how to do it because I have this message when I tried the command "cifs setup"

filer> cifs setup

CIFS is not licensed.

(Use the "license" command to license it.)

Thanks

Re: Manage a Filer with a AD account without a CIFS License

scottgelb — Fri, 08 Jun 2012 14:03:25 GMT

What version of ontap? It may have changed since I last did it. But on a San only customer have it authenticating without a cifs license.

Sent from my iPhone 4S

Re: Manage a Filer with a AD account without a CIFS License

aborzenkov — Fri, 08 Jun 2012 14:23:16 GMT

That’s correct, block protocol licenses enable some CIFS functionality; but I have never heard it was possible with NFS only filer.

Re: Manage a Filer with a AD account without a CIFS License

scottgelb — Fri, 08 Jun 2012 14:28:41 GMT

I'll check of documented but remember doing it just to get domain user for login. What I am wondering now is if we had a demo key and if it just kept working after. But can't think of a change when cifs setup was disabled...but from the last post it obviously is and I missed it.

What was the ontap and licenses in the system?

Sent from my iPhone 4S

Re: Manage a Filer with a AD account without a CIFS License

REALWAITE — Fri, 08 Jun 2012 15:09:18 GMT

Hi Scott,

DOT 7.3.6

thanks

Réal

Re: Manage a Filer with a AD account without a CIFS License

scottgelb — Fri, 08 Jun 2012 15:37:45 GMT

I just ran through some what if scenarios in my vsim.. If fcp or iscsi or cifs are licensed (any of the 3) then cifs setup works. If one of the 3 are not licensed then you get the error that it needs a license. What I did find is that if cifs is already setup, it will still start and run for authentication even without any of the 3 licensed.

I would talk to your NetApp team and ask about a demo key so you can setup cifs, cifs setup, then delete the license. You won't be using it for protocol access just authentication and that would be a workaround (if approved). If you ever need to modify it then you would need a key again... you don't have iscsi or fcp licensed on this system and nfs only?

Something learned new again today...or relearned With the nfs only system a while ago... iscsi was free on all controllers back then and cifs setup would have worked the based on that. That has to be what happened when I setup cifs only for domainuser login.

Re: Manage a Filer with a AD account without a CIFS License

aborzenkov — Fri, 08 Jun 2012 15:56:24 GMT

iscsi was free on all controllers back then and cifs setup would have worked the based on that

That's most likely reason.

Re: Manage a Filer with a AD account without a CIFS License

REALWAITE — Fri, 08 Jun 2012 18:22:36 GMT

You're right, I did not put my license yet.

When I added my licenses, it works

Thanks

Réal

Re: Manage a Filer with a AD account without a CIFS License

scottgelb — Fri, 08 Jun 2012 18:49:12 GMT

Very good. Then you can "useradmin domainuser add domain\user -g administrators" and use domain accounts to login and audit commands.

Sent from my iPhone 4S