FAS and V-Series Storage Systems Discussions

Name Mapping

SVHO

Hello,

Per our NetApp engineer's recommendation of using name mapping & setting the security style to NTFS for a share that has multiple protocols (NFS & CIFS). We finally had our programmer tested a share called “digital$” (on volume called /vol_digital) that is supposed to be NFS & CIFS. 

On the Linux machine we have changed the user and group owernship to “nginx” for a test file called test.txt.  During our test, it failed to read the file.  But when we changed the security style to “Unix” the  test is successful. Of course the "Unix" will mess up our NTFS permisison so that is not a resolution. We also tried "Mixed" without any luck.

 

For our name mapping, we have the unix to windows as follows:

 

root -->webuseraccount in windows

nginx -->webuseraccount in windows

 

NFS mount as follows:

 

mount -t nfs myipaddress:/vol_digital /mnt/digital

 

If you have any feedback that would be great.  I am thinking there might be something with “no_root_squash”.  


Thanks,
SVHO

1 ACCEPTED SOLUTION

Jeff_Yao

every file/dir on filer has 2 secirty descriptors: windows(ntfs) and unix; but the active one defines which type of user would be used to check permission. the active security descriptor is controlled by volume security style or the last security modifier's security style. volume security style goes first.

 

1. volume security style: unix, all files/dirs are unix style - same as windows(ntfs)

2. vol security style is mixed, all files/dir are using the last security modifier's style which means file/dir could be unix style or win style; you can use fsecurity (7-mode) or vserver security file-directory show (cdot) command to check which style is active. 

 

in your situation, it looks like the effective style is windows and ur windows user (which is the unix user mapping to) doesnt have enough permission to access that file. of couse it could be something else. better to check below kb for troubleshooting

 

https://kb.netapp.com/support/s/article/ka11A0000001TYVQA2/Troubleshooting-Workflow-Permission-denied-CIFS?language=en_US

 

hopefully helps

 

thanks

 

Jeff

View solution in original post

1 REPLY 1

Jeff_Yao

every file/dir on filer has 2 secirty descriptors: windows(ntfs) and unix; but the active one defines which type of user would be used to check permission. the active security descriptor is controlled by volume security style or the last security modifier's security style. volume security style goes first.

 

1. volume security style: unix, all files/dirs are unix style - same as windows(ntfs)

2. vol security style is mixed, all files/dir are using the last security modifier's style which means file/dir could be unix style or win style; you can use fsecurity (7-mode) or vserver security file-directory show (cdot) command to check which style is active. 

 

in your situation, it looks like the effective style is windows and ur windows user (which is the unix user mapping to) doesnt have enough permission to access that file. of couse it could be something else. better to check below kb for troubleshooting

 

https://kb.netapp.com/support/s/article/ka11A0000001TYVQA2/Troubleshooting-Workflow-Permission-denied-CIFS?language=en_US

 

hopefully helps

 

thanks

 

Jeff

View solution in original post

Announcements
NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner
Public