Network and Storage Protocols

CIFS Share no write acess but can read

Netapp_maniac
6,674 Views

Hey Techies ,

 

I have created a cifs share with default permission  of user/group -Everyone with FUll control . but then i see that i can access the folder but unable to write anything in the folder . Volume 's security style is mixed type.

 

Deets -

Created a vol1 of mixed security-style

Created a export-policy rules and applied to the vol1

Created a cifs share on vol1 , and created ACL's on it .

I am not able to understand where i am going wrong .because vol1 is accessible but unable to write.

 

Can someone help me here to get this fixed .

I am using -NetApp Release 9.8RC1 

 

Thanks in advance

 

13 REPLIES 13

pedro_rocha
6,661 Views

mixed is a must?

Netapp_maniac
6,591 Views

Is there any other way that both CIFS and NFS clients can access same share ?

aladd
6,594 Views

You can have both access the same share. it may be necessary to implement name mapping to do so.

 

You can reference the guide that was mentioned earlier:

 

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-multp-cg/SMB-CIFS%20and%20NFS%20multiprotocol%20express%20configuration.pdf

 

Can you specify the ACLs you set up earlier?

pedro_rocha
6,573 Views

as @aladd  said... name mapping and set it to NTFS or UNIX depending from where the majority of the users connect

tduran12165
6,644 Views

Howdy,

 

Not sure what your export-policy looks like, but did you verify these settings?  (These are sample settings below)  

  • Read-only access: To clients using NTLM or Kerberos authentication
  • Read-write access: To clients using Kerberos authentication

aladd
6,632 Views

What ACLs did you set up on it?

 

Also, when you attempt to write, what is the failure message and secd output? (example for secd output after a failed attempt ::>event log show -event *secd*)

Netapp_maniac
6,599 Views

When i attempt to write its says" you need permission for this action"

 

Netapp_maniac
6,583 Views

I ran this command - " vserver sectrace trace-result show " and below is the error if you could help here ?

 

Access is denied by UNIX
permissions while creating
the directory. Access is not
granted for: "Synchronize",
"Read Control", "Read
Attributes", "Execute", "Read
EA", "Append", "Read"

 

aladd
6,629 Views

This also depends on if you are attempting to mount it on a Linux client or access through an NTFS client.

 

See the following for failures in Linux clients.

 

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Linux_client_mounts_CIFS_share_fails_with_error_%22write-protected%2C_...

 

For additional information on CIFS shares and multi-client access.

 

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/How_to_troubleshoot_CIFS_share_and_export_policy_access_permissions

Netapp_maniac
6,603 Views

aladd
6,600 Views

Sorry about that, I have sent an incorrect link. However @DarrenJ has sent you some helpful links concerning configuration that may be of use as well.

 

 

You may also find this helpful:

 

https://kb.netapp.com/Advice_and_Troubleshooting/Data_Storage_Software/ONTAP_OS/Troubleshooting_CIFS_or_SMB_access_denied

 

 

DarrenJ
6,629 Views

What kind of client is trying to access this? If it's strictly Windows/CIFS, you don't need an export policy on the volume at all, and ideally would want NTFS file system rather than mixed.

 

Few useful links maybe.

 

CIFS Express Configuration Guide ( Just Windows/CIFS clients)

 

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-cifs-cfg/SMB-CIFS%20configuration%20express.pdf

 

MultiProtocol Express Configuration Guide

 

https://docs.netapp.com/ontap-9/topic/com.netapp.doc.exp-multp-cg/SMB-CIFS%20and%20NFS%20multiprotocol%20express%20configuration.pdf

Netapp_maniac
6,597 Views

I need both type of client to access this share 

Public