CIFS Share no write acess but can read

[Netapp_maniac]

Hey Techies ,

I have created a cifs share with default permission  of user/group -Everyone with FUll control . but then i see that i can access the folder but unable to write anything in the folder . Volume 's security style is mixed type.

Deets -

Created a vol1 of mixed security-style

Created a export-policy rules and applied to the vol1

Created a cifs share on vol1 , and created ACL's on it .

I am not able to understand where i am going wrong .because vol1 is accessible but unable to write.

Can someone help me here to get this fixed .

I am using -NetApp Release 9.8RC1 

Thanks in advance

[pedro_rocha]

mixed is a must?

[Netapp_maniac]

Is there any other way that both CIFS and NFS clients can access same share ?

[aladd]

You can have both access the same share. it may be necessary to implement name mapping to do so.

You can reference the guide that was mentioned earlier:

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-multp-cg/SMB-CIFS%20and%20NFS%20multiprotocol%20express%20configuration.pdf

Can you specify the ACLs you set up earlier?

[pedro_rocha]

as @aladd  said... name mapping and set it to NTFS or UNIX depending from where the majority of the users connect

[tduran12165]

Howdy,

Not sure what your export-policy looks like, but did you verify these settings?  (These are sample settings below)  

• Read-only access: To clients using NTLM or Kerberos authentication
• Read-write access: To clients using Kerberos authentication

[aladd]

What ACLs did you set up on it?

Also, when you attempt to write, what is the failure message and secd output? (example for secd output after a failed attempt ::>event log show -event *secd*)

[Netapp_maniac]

When i attempt to write its says" you need permission for this action"

[Netapp_maniac]

I ran this command - " vserver sectrace trace-result show " and below is the error if you could help here ?

Access is denied by UNIX
permissions while creating
the directory. Access is not
granted for: "Synchronize",
"Read Control", "Read
Attributes", "Execute", "Read
EA", "Append", "Read"

[aladd]

This also depends on if you are attempting to mount it on a Linux client or access through an NTFS client.

See the following for failures in Linux clients.

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Linux_client_mounts_CIFS_share_fails_with_error_%22write-protected%2C_...

For additional information on CIFS shares and multi-client access.

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_troubleshoot_CIFS_share_and_export_policy_access_permissions

[Netapp_maniac]

i am unable to view this page -it say's "you dont have permission to view this page "

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_troubleshoot_CIFS_share_and_export_policy_access_permissions

[aladd]

Sorry about that, I have sent an incorrect link. However @DarrenJ has sent you some helpful links concerning configuration that may be of use as well.

You may also find this helpful:

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Troubleshooting_CIFS_or_SMB_access_denied

[DarrenJ]

What kind of client is trying to access this? If it's strictly Windows/CIFS, you don't need an export policy on the volume at all, and ideally would want NTFS file system rather than mixed.

Few useful links maybe.

CIFS Express Configuration Guide ( Just Windows/CIFS clients)

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-cifs-cfg/SMB-CIFS%20configuration%20express.pdf

MultiProtocol Express Configuration Guide

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-multp-cg/SMB-CIFS%20and%20NFS%20multiprotocol%20express%20configuration.pdf

[Netapp_maniac]

I need both type of client to access this share 

[Ashun]

Not sure if the same is true, or may be taken as a reference
When I use cifs share (security style is unix), I will change the Unix-Permissions field to --rwxrwxrwx to ensure that I can read and write

Once I created three vol, the security style was ntfs, unix, mixed, and cifs share was created.
The export-policy rules are 0.0.0.0/0
An ACL is Everyone/Full Control
I accessed three shares on Windows, and the situation was: ntfs can read and write, unix and mixed can read but not write, I checked all the factors that can affect permissions, and when I changed the volume field Unix-Permissions to --rwxrwxrwx, the shares could read and write immediately