Effective December 3, NetApp adopts Microsoft’s Business-to-Customer (B2C) identity management to simplify and provide secure access to NetApp resources.
For accounts that did not pre-register (prior to Dec 3), access to your NetApp data may take up to 1 hour as your legacy NSS ID is synchronized to the new B2C identity.
To learn more, read the FAQ and watch the video.
Need assistance? Complete this form and select “Registration Issue” as the Feedback Category.

ONTAP Discussions

Does ABE support widelinks?

andre_koch

HI there

we just testing widelinks in conjunction wit abe enable shares. As soon we enable ABE, the access to widelink relocate does not work anymore. Error "Windows cannot access \\blabla\bla.
Has anybody sucessful implemented widelink with ABE enabled shares? 

1 ACCEPTED SOLUTION

tahmad

Hello @andre_koch , was your issue resolved?

View solution in original post

4 REPLIES 4

tahmad

Hello @andre_koch , was your issue resolved?

View solution in original post

parisi

I'm guessing the issue here is that with ABE, you only see the shares you have access to. If the account you're using can't see the share, then it can't redirect.

 

I enabled ABE on my shares and my widelinks work fine.

 

::> cifs share properties show -vserver DEMO -share-name files,flexgroup
Vserver Share Properties
---------------- ------------------------- -----------------------------
DEMO files oplocks
browsable
changenotify
access-based-enumeration
show-previous-versions
DEMO flexgroup oplocks
browsable
changenotify
access-based-enumeration
show-previous-versions

 

This is my widelink - it points to the "files" CIFS share.

 

lrwxrwxrwx 1 root root 33 Feb 16 11:14 remote-link -> /mnt/client1/dir1/dir2/linked-dir

 

These are the pertinent widelink mapping entries:

 

::> cifs symlink show -vserver DEMO
Vserver Unix Path CIFS Server CIFS Share CIFS Path Locality
---------- --------------- --------------- ----------- -------------- --------
DEMO /mnt/client1/ DEMO files / local
DEMO /mnt/client2/ DEMO flexgroup / local

I can redirect just fine:

 

parisi_0-1617206318312.png

 

parisi_1-1617206345574.png

 

You may want to try flushing the dfsutil cache.

https://docs.microsoft.com/en-us/windows-server/administration/windows-commands/dfsutil 

 

You might also want to try disabling DFS advertisements for that symlink with the -symlink-properties values symlinks,no_strict_security.

 

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.cdot-famg-cifs/GUID-21E02C23-A83F-462D-BC4B-98240FA5BB34.html 

 

If that still doesn't help, I'd suggest opening a case.

 

andre_koch
Hi thank you for your quick response

I will check that again, maybe there is something wrong in my configuration.
Did the widelink also working when the parent share is ABE enabled as in the example below?

/ (root)
- data1/ (ABE enabled share “data1”)
- folder1
- folder2
- folder3
- widelink -> to another share (also ABE enabled)

parisi

Both the parent and destination shares had ABE enabled.

Announcements
NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner
Public