topic Re: CIFS without Active Directory in Network and Storage Protocols

CIFS without Active Directory

kal — Thu, 10 Mar 2016 20:49:14 GMT

Hi,

I want to configure CIFS on my Netapp. The Netapp cluster has for DNS the Google's DNS (8.8.8.8) and I haven't an Active Directory. I want my client which are in WORKGROUP can connect to a CIFS share on the cluster. Is an Active Directory required ?

Regards.

Re: CIFS without Active Directory

aborzenkov — Thu, 10 Mar 2016 11:23:23 GMT

Do you have 7-Mode or C-Mode (you added both tags)?

Re: CIFS without Active Directory

kal — Thu, 10 Mar 2016 13:18:31 GMT

Hi,

Sorry, I have a Cluster mode Data On Tap.

Re: CIFS without Active Directory

aborzenkov — Thu, 10 Mar 2016 13:26:40 GMT

As far as I know currently only CIFS servers that a part of Active Directory are supported. Although documentation mentions that "Workgroups are not supported in this release", so it is possible that it will be supported in the future.

Re: CIFS without Active Directory

kal — Thu, 10 Mar 2016 13:57:29 GMT

Ok, I undestand. So the AD's DNS must be declared on the cluster and the client computers must be in the AD's domain. Isn't it ?

Thanks.

Re: CIFS without Active Directory

thomas_glodde — Thu, 10 Mar 2016 20:42:39 GMT

You MUST configure DNS in the SVM and join an ADS for CIFS to properly work. Clients & Servers which access the SVMs shares can be inside or outside of your ADS domain.

Re: CIFS without Active Directory

kal — Mon, 14 Mar 2016 08:55:45 GMT

Hi,

In conclusion, my CIFS SVM/Volume must join the Active Directory Server. The Clients ans Server which access to the CIFS share could be outside, in WORKGROUP for example.

But what about the post of Aborzenkov :

"As far as I know currently only CIFS servers that a part of Active Directory are supported. Although documentation mentions that "Workgroups are not supported in this release", so it is possible that it will be supported in the future".

Thanks a lot for your answer.

Re: CIFS without Active Directory

Darkstar — Mon, 14 Mar 2016 12:53:41 GMT

The SVM has to be in an AD domain, otherwise you will not get any CIFS functionality.

The clients that connect to the NetApp can be either other AD members (domain computers) or standalone computers (i.e. computers running in Workgroup mode). Note that if you try to connect to the SVM on the NetApp cluster from a computer which is NOT part of the same domain, you will have to supply a username and password to connect. This can be either a domain user (using "DOM\User"-style usernames) or a local user created on the SVM (see the vserver cifs users-and-groups local-user create command). This is the same, actually, as with Windows servers and computers without any NetApp involved

Also, if you really need CIFS with Workgroup style authentication, it is possible that this might be added to Data OnTap at a later date (all documentation, for example, says it is "not yet available" or "currently not possible")....

Regards

-Michael

Re: CIFS without Active Directory

angelpublishing — Tue, 07 Feb 2017 17:01:02 GMT

I'd just like to say it's very inconv. to force the use of AD just to enable CIFS. I'm a complete linux shop and use my FAS device for NFS primarily. I figured 'hey why not use it's CIFS support' ... nope.

So I'll be using a cheap, unreliable network storage device simply to host CIFS shares meanwhile.

++bump as a feature request. Simply let me turn it on and create shares like every other network storage device lets you.

Thanks for the sweet NFS support though.

Re: CIFS without Active Directory

Darkstar — Wed, 08 Feb 2017 08:21:11 GMT

If you're a complete NFS shop, what do you need CIFS for? If it's only for 1 share that 2 or 2 users access, you can also use Microsoft's NFS for Windows, for example.

That being said, it's been possible for a few months now (since OnTap 9.0) to run an SVM in Workgroup mode without AD. See the man page for the "vserver cifs create -workgroup" command.

-Michael

Re: CIFS without Active Directory

angelpublishing — Wed, 08 Feb 2017 16:34:04 GMT

Michael,

We are _currently_ an "NFS" shop because all I use the NetApp for is NFS storage for xenserver clusters. I have a separate low quality device that's being relied on heavily for CIFS, so I figured why not use the NetApp for CIFS too.

I'd like to move to the NetApp, that's all. I am on 9.x so thanks for the tip!

So basically, you can configure CIFS with an empty AD value via CLI, but not System Manager (I believe it gives you an error when it's blank).

-Kyle

Re: CIFS without Active Directory

PaulFiler — Fri, 19 May 2017 16:50:40 GMT

What about a Workgroup CIFS share? vserver cifs create -vserver hq-vs0 -cifs-server hq-vs0 -workgroup wg

Re: CIFS without Active Directory

JohnChen — Tue, 23 May 2017 19:48:45 GMT

If you are Ontap9.0, you can set it up without AD.

I got it work on my NetApp 8080 with Ontap9.0 version.

1) Create CIFS server via CLI

Cluster1::>vserver cifs create -vserver <SVM> -cifs-server <SVM> -workgroup <workgroup01>

2) set diag

3) Enable local users auth

Cluster1::>vserver cifs options modify –vserver <SVM> -is-local-auth-enabled true

Cluster1::>vserver cifs options modify –vserver <SVM> -is-local-users-and-groups-enabled true

3) Create your local user that will authenticate

Cluster1::>vserver cifs users-and-groups local-user create –vserver <SVM> -user-name <USER>

4) Create a CIFS LIF on the SVM (separate IP but can be in same subnet as NFS)

5) Create a CIFS share on the same volume as the NFS mount

6) Map to the CIFS share using the user from step 3. \\<LIF-IP-Address>\<CIFS-Share>

Re: CIFS without Active Directory

all4netapp — Wed, 22 May 2019 08:30:11 GMT

I'd follow the steps and i am able to read from the share but can't modify or create new file\folder

please your help

Scott

Re: CIFS without Active Directory

JohnChen — Wed, 22 May 2019 15:52:13 GMT

check your share access control permission under SVMs/shares

Re: CIFS without Active Directory

JohnChen — Wed, 22 May 2019 19:52:42 GMT

You also need to check MTU settings on host and netapp storage . Need to be matched

Re: CIFS without Active Directory

josemartins525 — Mon, 24 Apr 2023 17:28:54 GMT

Perfect!!!

Re: CIFS without Active Directory

spearo — Thu, 15 Jun 2023 03:30:52 GMT

This worked perfectly for me. Thanks.