Network and Storage Protocols

CIFS server with multi domain servers possible?

NAROCKS5
10,399 Views

Is it possible to associate multi DNS / AD servers with multi volumes in a single SVM?   For instance TEST.example1.com   Prod.example1.com   UAT.example1.com  

 

Our Ontap version is 8.3.2

5 REPLIES 5

ekashpureff
10,367 Views

 

NA -

 

Your question isn't that clear to me, but I'll try to answer...

 

The SVM will discover all of the servers automagicly when you join in to the domain.

You can check the discovered servers with:

vserver active-directory discovered-servers show

 

If you want the verver to have multiple aliases in the domain use:

 

The 'vserver cifs add-netbios-aliases' command creates or adds a list of NetBIOS aliases for the CIFS server name.

 


I hope this response has been helpful to you.

 

At your service,

 

Eugene E. Kashpureff, Sr.
Independent NetApp Consultant http://www.linkedin.com/in/eugenekashpureff
Senior NetApp Instructor, FastLane US http://www.fastlaneus.com/
(P.S. I appreciate 'kudos' on any helpful posts.)

NAROCKS5
10,329 Views

I am sorry.  Let me clarify the question.  In our environment we have to multi domain names that our new filers will have to serve CIFS volumes & datastore volumes for our VMware.  Multi domain names, such as TEST.example1.com   Prod.example1.com   UAT.example1.com.

 

My question is without creating multi SVMs for each domain, is there a way to implement/serve multi domain CIFS volumes without having to create additional SVM? 

ekashpureff
10,320 Views

 

Rocks -

 

Each vserver can only authenticate within one domain.

 

From the man pages:

 

 

The vserver cifs create command creates a CIFS server on a Vserver. When you create the CIFS server, you must add it to an existing CIFS domain. When you enter this command, the storage system prompts you to provide the credentials of a user account that has sufficient privileges to add computers to the -ou container within the -domain domain. The user account must have a password that cannot be empty. If the new CIFS server is joining a domain, this command might take several minutes to complete.

 
Note:Each Vserver can have only one CIFS server.


I hope this response has been helpful to you.

 

At your service,

 

Eugene E. Kashpureff, Sr.
Independent NetApp Consultant http://www.linkedin.com/in/eugenekashpureff
Senior NetApp Instructor, FastLane US http://www.fastlaneus.com/
(P.S. I appreciate 'kudos' on any helpful posts.)

 

GidonMarcus
10,311 Views

Hi

 

Small note here - if your domains have trust between at least so that the domain where the SVM is trusts the domain where the user is. you will be able to authenticate in a cross domain manner. (of course the objects such files and folder will need to have an ACL allowing this user or member groups the access to the object)

 

Gidi

Gidi Marcus (Linkedin) - Storage and Microsoft technologies consultant - Hydro IT LTD - UK

josesuta
7,554 Views
 
Public