ONTAP Discussions

How to enable Access Based Enumeration via Powershell Toolkit for OnTap 9

Jim_Robertson
6,038 Views

I cannot seem to find a way to enable Access Based Enumeration (ABE) via the NetApp Powershell Toolkit v4.5 and OnTap 9.0P2. Can anyone tell me how?

I went to the system manager and enabled it there, so it does show up in the share properties from the CLI:

prdc-ramp-01::> cifs share show -share-name ShareName1 -instance

                                      Vserver: vs0
                                        Share: ShareName1
                     CIFS Server NetBIOS Name: CifsServerName1
                                         Path: /ShareName1
                             Share Properties: access-based-enumeration
                                               browsable
                                               changenotify
                                               oplocks
                                               show-previous-versions
                           Symlink Properties: enable
                                               read_only
                      File Mode Creation Mask: -
                 Directory Mode Creation Mask: -
                                Share Comment: -
                                    Share ACL: Everyone / Full Control
                File Attribute Cache Lifetime: -
                                  Volume Name: ShareName1
                                Offline Files: manual
                Vscan File-Operations Profile: standard
            Maximum Tree Connections on Share: 4294967295
                   UNIX Group for File Create: -



But, if I use the PSK to get the Share Properties, it doesn't show up:


PS E:\Powershell> $Share | Select-Object {$_.ShareProperties}

$_.ShareProperties
------------------
{oplocks, browsable, changenotify, show_previous_versions}



I would think that this would be a value for the ShareProperties, but the help file for the Add-NcCifsShare doesn't even list it as an option:

-ShareProperties <String[]>
The list of properties for this CIFS share. Possible values:
"oplocks" - This specifies that opportunistic locks (client-side
caching) are enabled on this share.
"browsable" - This specifies that the share can be browsed by
Windows clients.
"showsnapshot" - This specifies that Snapshots can be viewed and
traversed by clients.
"changenotify" - This specifies that CIFS clients can request for
change notifications for directories on this share.
"homedirectory" - This specifies that the share is added and enabled
as part of the CIFS home directory feature. The configuration of this
share should be done using CIFS home directory feature interface.
"attributecache" - This specifies that connections through this share
are caching attributes for a short time to improve performance.

1 ACCEPTED SOLUTION

JGPSHNTAP
6,028 Views

Here is a snippit from my code

 

add-nccifsshare -vservercontext $vserver -name $sharename -shareproperties oplocks,browsable,changenotify,show_previous_versions,access_based_enumeration -Path "/$($volname)/ud01"

View solution in original post

4 REPLIES 4

JGPSHNTAP
6,029 Views

Here is a snippit from my code

 

add-nccifsshare -vservercontext $vserver -name $sharename -shareproperties oplocks,browsable,changenotify,show_previous_versions,access_based_enumeration -Path "/$($volname)/ud01"

Jim_Robertson
6,020 Views

Thanks, @JGPSHNTAP, that does appear to work.  So, it's just not documented, and it does not show up if you do a $Share | Select-Object {$_.ShareProperties}.

 

Or, am I looking under the wrong property to verify that it's been set?  It shows the other settings {oplocks, browsable, changenotify, show_previous_versions}, so I don't know why it wouldn't show ABE.

 

Thanks again for the help!

 

JGPSHNTAP
6,017 Views

I don't know what $share is, but I assume it's get-nccifssshare

 

It's there

 

Try this

 

 get-nccifsshare $share | Select -ExpandProperty shareproperties

Jim_Robertson
5,990 Views

Ok, that worked!

$Share was the actual share object itself: $Share = Get-NcCifsShare -Name MyShare

 

So, this worked:

Get-NcCifsShare -Name $Share.ShareName | Select -ExpandProperty shareproperties

 

Thanks again for the help!

Public