Network and Storage Protocols

Can't see AD Group on my filer

ademuynck
6,952 Views

Hie every body,

I have a little problem. I have to give acces to user on my NETAPP filer integrated in my Active Directory domain.

So, when i try to search AD Group, throught NETAPP SYSTEM MANAGER, no group are found.

So on my CIFS Share, on security, it is impossible to add Active Directory group...

Is it normal ?

Thanks for answer...

Best regards

1 ACCEPTED SOLUTION

radek_kubka
6,952 Views

...or you can use good , old FilerView.

Having said this, first make sure your filer can talk to your DCs:

cifs testdc

If it can't, it should tell you more, e.g. the common culprit is a time skew higher than 5 minutes between a filer and a DC.

Regards,
Radek


View solution in original post

8 REPLIES 8

thomas_glodde
6,952 Views

You can NOT add domain groups using system manager. You have to use the Windows Computer Management or the command line.

ademuynck
6,952 Views

Ok thanks.

Using computer management on Windows 2008 R2, don't work.

in CLI which command tape ? cifs access Partage -g everyone Full Control ?

If CLI is correct, it return :  unknow unix group everyone

Bests regards

radek_kubka
6,953 Views

...or you can use good , old FilerView.

Having said this, first make sure your filer can talk to your DCs:

cifs testdc

If it can't, it should tell you more, e.g. the common culprit is a time skew higher than 5 minutes between a filer and a DC.

Regards,
Radek


peter_lehmann
6,952 Views

Hi

In 2008(R2) click on Start and then use the "search field" to type "computer". This will give you the "Computer Management" and there you "Connect to another Computer (the NetApp in this case)...

On the CLI use this command (assuming your AD is named DOMAIN):

filer> cifs access DOMAIN\users "Full Control"

This will give the group users from the AD called DOMAIN the Full Control access on the share. Make sure to use the " " !

Peter

radek_kubka
6,952 Views
"Connect to another Computer (the NetApp in this case)...

This actually never worked for me on win2k8 R2 either - don't know why & was never bothered to troubleshoot.

ademuynck
6,952 Views

Ok it work for.

Ad group throught Filer View. This is a bit old but it roxxx !

Thanks a lot for your answers.

In futur release of System Manager is it possible to do this ?

thanks

peter_lehmann
6,952 Views

I've just tested with System Manager 2.0 (beta) and it worked for domain groups.

ademuynck
6,952 Views

Ok thanks for information.

Have a nice day

Public