topic CIFS Share no write acess but can read in Network and Storage Protocols

CIFS Share no write acess but can read

Netapp_maniac — Tue, 17 Aug 2021 16:38:46 GMT

Hey Techies ,

I have created a cifs share with default permission of user/group -Everyone with FUll control . but then i see that i can access the folder but unable to write anything in the folder . Volume 's security style is mixed type.

Deets -

Created a vol1 of mixed security-style

Created a export-policy rules and applied to the vol1

Created a cifs share on vol1 , and created ACL's on it .

I am not able to understand where i am going wrong .because vol1 is accessible but unable to write.

Can someone help me here to get this fixed .

I am using -NetApp Release 9.8RC1

Thanks in advance

Re: CIFS Share no write acess but can read

pedro_rocha — Tue, 17 Aug 2021 17:46:46 GMT

mixed is a must?

Re: CIFS Share no write acess but can read

tduran12165 — Tue, 17 Aug 2021 21:18:17 GMT

Howdy,

Not sure what your export-policy looks like, but did you verify these settings? (These are sample settings below)

Read-only access: To clients using NTLM or Kerberos authentication
Read-write access: To clients using Kerberos authentication

Re: CIFS Share no write acess but can read

aladd — Wed, 18 Aug 2021 02:04:38 GMT

What ACLs did you set up on it?

Also, when you attempt to write, what is the failure message and secd output? (example for secd output after a failed attempt ::>event log show -event *secd*)

Re: CIFS Share no write acess but can read

aladd — Wed, 18 Aug 2021 02:07:43 GMT

This also depends on if you are attempting to mount it on a Linux client or access through an NTFS client.

See the following for failures in Linux clients.

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Linux_client_mounts_CIFS_share_fails_with_error_%22write-protected%2C_mounting_read-only%22

For additional information on CIFS shares and multi-client access.

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_troubleshoot_CIFS_share_and_export_policy_access_permissions

Re: CIFS Share no write acess but can read

DarrenJ — Wed, 18 Aug 2021 02:17:55 GMT

What kind of client is trying to access this? If it's strictly Windows/CIFS, you don't need an export policy on the volume at all, and ideally would want NTFS file system rather than mixed.

Few useful links maybe.

CIFS Express Configuration Guide ( Just Windows/CIFS clients)

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-cifs-cfg/SMB-CIFS%20configuration%20express.pdf

MultiProtocol Express Configuration Guide

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-multp-cg/SMB-CIFS%20and%20NFS%20multiprotocol%20express%20configuration.pdf

Re: CIFS Share no write acess but can read

Netapp_maniac — Wed, 18 Aug 2021 08:22:23 GMT

i am unable to view this page -it say's "you dont have permission to view this page "

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_troubleshoot_CIFS_share_and_export_policy_access_permissions

Re: CIFS Share no write acess but can read

aladd — Wed, 18 Aug 2021 09:07:36 GMT

Sorry about that, I have sent an incorrect link. However @DarrenJ has sent you some helpful links concerning configuration that may be of use as well.

You may also find this helpful:

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Troubleshooting_CIFS_or_SMB_access_denied

Re: CIFS Share no write acess but can read

Netapp_maniac — Wed, 18 Aug 2021 09:33:56 GMT

I need both type of client to access this share

Re: CIFS Share no write acess but can read

Netapp_maniac — Wed, 18 Aug 2021 09:34:45 GMT

When i attempt to write its says" you need permission for this action"

Re: CIFS Share no write acess but can read

Netapp_maniac — Wed, 18 Aug 2021 10:26:17 GMT

Is there any other way that both CIFS and NFS clients can access same share ?

Re: CIFS Share no write acess but can read

aladd — Wed, 18 Aug 2021 10:32:45 GMT

You can have both access the same share. it may be necessary to implement name mapping to do so.

You can reference the guide that was mentioned earlier:

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-multp-cg/SMB-CIFS%20and%20NFS%20multiprotocol%20express%20configuration.pdf

Can you specify the ACLs you set up earlier?

Re: CIFS Share no write acess but can read

Netapp_maniac — Wed, 18 Aug 2021 11:37:58 GMT

I ran this command - " vserver sectrace trace-result show " and below is the error if you could help here ?

Access is denied by UNIX
permissions while creating
the directory. Access is not
granted for: "Synchronize",
"Read Control", "Read
Attributes", "Execute", "Read
EA", "Append", "Read"

Re: CIFS Share no write acess but can read

pedro_rocha — Wed, 18 Aug 2021 13:31:15 GMT

as @aladd said... name mapping and set it to NTFS or UNIX depending from where the majority of the users connect

Re: CIFS Share no write acess but can read

Ashun — Tue, 24 Dec 2024 05:59:22 GMT

Not sure if the same is true, or may be taken as a reference
When I use cifs share (security style is unix), I will change the Unix-Permissions field to --rwxrwxrwx to ensure that I can read and write

Once I created three vol, the security style was ntfs, unix, mixed, and cifs share was created.
The export-policy rules are 0.0.0.0/0
An ACL is Everyone/Full Control
I accessed three shares on Windows, and the situation was: ntfs can read and write, unix and mixed can read but not write, I checked all the factors that can affect permissions, and when I changed the volume field Unix-Permissions to --rwxrwxrwx, the shares could read and write immediately