Network Storage Protocols Discussions

CIFS Share no write acess but can read

Netapp_maniac

Hey Techies ,

 

I have created a cifs share with default permission  of user/group -Everyone with FUll control . but then i see that i can access the folder but unable to write anything in the folder . Volume 's security style is mixed type.

 

Deets -

Created a vol1 of mixed security-style

Created a export-policy rules and applied to the vol1

Created a cifs share on vol1 , and created ACL's on it .

I am not able to understand where i am going wrong .because vol1 is accessible but unable to write.

 

Can someone help me here to get this fixed .

I am using -NetApp Release 9.8RC1 

 

Thanks in advance

 

13 REPLIES 13

pedro_rocha

mixed is a must?

Netapp_maniac

Is there any other way that both CIFS and NFS clients can access same share ?

aladd

You can have both access the same share. it may be necessary to implement name mapping to do so.

 

You can reference the guide that was mentioned earlier:

 

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-multp-cg/SMB-CIFS%20and%20NFS%20multiprotocol%20express%20configuration.pdf

 

Can you specify the ACLs you set up earlier?

pedro_rocha

as @aladd  said... name mapping and set it to NTFS or UNIX depending from where the majority of the users connect

tduran12165

Howdy,

 

Not sure what your export-policy looks like, but did you verify these settings?  (These are sample settings below)  

  • Read-only access: To clients using NTLM or Kerberos authentication
  • Read-write access: To clients using Kerberos authentication

aladd

What ACLs did you set up on it?

 

Also, when you attempt to write, what is the failure message and secd output? (example for secd output after a failed attempt ::>event log show -event *secd*)

Netapp_maniac

When i attempt to write its says" you need permission for this action"

 

Netapp_maniac

I ran this command - " vserver sectrace trace-result show " and below is the error if you could help here ?

 

Access is denied by UNIX
permissions while creating
the directory. Access is not
granted for: "Synchronize",
"Read Control", "Read
Attributes", "Execute", "Read
EA", "Append", "Read"

 

aladd

This also depends on if you are attempting to mount it on a Linux client or access through an NTFS client.

 

See the following for failures in Linux clients.

 

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Linux_client_mounts_CIFS_share_fails_with_error_%22write-protected%2C_...

 

For additional information on CIFS shares and multi-client access.

 

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_troubleshoot_CIFS_share_and_export_policy_access_permissions

Netapp_maniac

aladd

Sorry about that, I have sent an incorrect link. However @DarrenJ has sent you some helpful links concerning configuration that may be of use as well.

 

 

You may also find this helpful:

 

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Troubleshooting_CIFS_or_SMB_access_denied

 

 

DarrenJ

What kind of client is trying to access this? If it's strictly Windows/CIFS, you don't need an export policy on the volume at all, and ideally would want NTFS file system rather than mixed.

 

Few useful links maybe.

 

CIFS Express Configuration Guide ( Just Windows/CIFS clients)

 

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-cifs-cfg/SMB-CIFS%20configuration%20express.pdf

 

MultiProtocol Express Configuration Guide

 

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-multp-cg/SMB-CIFS%20and%20NFS%20multiprotocol%20express%20configuration.pdf

Netapp_maniac

I need both type of client to access this share 

Announcements
NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner
Public