topic Re: You can not add Security group in version 3.1, 3.1.1 in Active IQ Unified Manager Discussions

You can not add Security group in version 3.1, 3.1.1

mmostrava — Thu, 05 Jun 2025 05:37:16 GMT

Hi, to the new version OnCommand SM do not add security groups to share folders (AD).

Users are fine.

Will fix?

Re: You can not add Security group in version 3.1, 3.1.1

kryan — Wed, 30 Apr 2014 13:53:45 GMT

Which version of ONTAP are you managing?

Thanks,

Kevin

Re: You can not add Security group in version 3.1, 3.1.1

mmostrava — Wed, 30 Apr 2014 14:02:40 GMT

NetApp Release 8.1.3 7-Mode

Adding group permissions on shell with command cifs access works fine.

Re: You can not add Security group in version 3.1, 3.1.1

kryan — Thu, 01 May 2014 16:10:54 GMT

If I understand the problem correctly, it should be possible.

Can you share a screenshot of the problem?

Thanks,

Kevin

Re: You can not add Security group in version 3.1, 3.1.1

mmostrava — Fri, 02 May 2014 06:37:34 GMT

When trying to add Domain group by OnCommand System Manager on CIFS share, textbox UserGroup goes highlighted with red line and it is imposible to add group, no error appears. This function was working in previous releases of OnCommand System Manager like a charm.

Trying on Internet Explorer version 10.0.9200.16897

Re: You can not add Security group in version 3.1, 3.1.1

kryan — Fri, 02 May 2014 13:55:33 GMT

Thanks for the screenshot.

Can you include the error message text from the User/Group field outlined in red (hover over it to get an error message)?

Kevin

Re: You can not add Security group in version 3.1, 3.1.1

kryan — Fri, 02 May 2014 14:11:53 GMT

I tested this on 3.1RC1 and found it says "Unknown Unix group <groupname>".

Let me investigate further and report back.

Kevin

Re: You can not add Security group in version 3.1, 3.1.1

mmostrava — Mon, 05 May 2014 08:34:11 GMT

You are right, on hover appears "Unknown Unix group <groupname>". The same error appears when I try to add domain group on shell with cifs access -g Domain\group "Permission", but typing cifs access Domain\group "Permission" adds permission successfully. So probably "-g" option is the root of problem when used with domain group.

Re: You can not add Security group in version 3.1, 3.1.1

kryan — Mon, 05 May 2014 12:15:16 GMT

Since there is no API call to manage CIFS shares in that manner, OCSM must use the "system cli" API and run a command as if it were on the controller CLI.

It appears something changed although it is not yet clear if that was ONTAP or OCSM - the investigation continues.

When there is a likely cause identified a bug will be filed on the appropriate product and I will post it here.

Thanks,

Kevin

Re: You can not add Security group in version 3.1, 3.1.1

kryan — Tue, 06 May 2014 10:35:15 GMT

Bug 822758 was filed to track and resolve this behavior.

Once there is information you will be able to watch it here:

http://support.netapp.com/NOW/cgi-bin/bol?Type=Detail&Display=822758

The workaround is to use the ONTAP CLI without the -g option.

Thanks,

Kevin

Re: You can not add Security group in version 3.1, 3.1.1

kryan — Tue, 13 May 2014 13:37:17 GMT

Can you share which versions worked for you? We have tested back to 3.0 and it behaves the same.

FYI - if the group exists in /etc/group file the modification will succeed.

Thanks,

Kevin

Re: You can not add Security group in version 3.1, 3.1.1

mmostrava — Mon, 19 May 2014 08:13:30 GMT

Retrospectively tested for sysmgr-setup-3-0-win.exe - OK

sysmgr-setup-3-1RC1-win.exe - Bug

sysmgr-setup-3-1-1RC1-win.exe - Bug

Thanks

Re: You can not add Security group in version 3.1, 3.1.1

kryan — Mon, 19 May 2014 17:35:03 GMT

Were those all tested against the same controller? Which version of ONTAP?

Thanks,

Kevin

Re: You can not add Security group in version 3.1, 3.1.1

mmostrava — Tue, 20 May 2014 10:47:00 GMT

ONTAP version: NetApp Release 8.1.3 7-Mode

Model: FAS3040

Re: You can not add Security group in version 3.1, 3.1.1

kryan — Tue, 20 May 2014 11:23:05 GMT

Thank you for this data.

Re: You can not add Security group in version 3.1, 3.1.1

kryan — Tue, 20 May 2014 14:29:50 GMT

Regarding the 3.0 result - was there any difference for this test? Was the same group used for all three tests? Was anything else changed for the 3.0 test?

Re: You can not add Security group in version 3.1, 3.1.1

mmostrava — Wed, 21 May 2014 06:42:58 GMT

Yes the same group. No change.

Re: You can not add Security group in version 3.1, 3.1.1

NKLCONTACTLENZEN — Wed, 28 May 2014 07:48:53 GMT

We have exactly the same problem. The problem started with version 3.1 en persists in version 3.1.1.

I'm waiting for a fix for quite some time now.... until then back to version 3.0...

Re: You can not add Security group in version 3.1, 3.1.1

NKLCONTACTLENZEN — Wed, 28 May 2014 08:28:53 GMT

WORKAROUND:

Choose by Select Type for Add other user instead of Add other group and enter the group name!