Access Appliance Online Help
- Getting started
- About Access Appliance
- Enabling certificate-based authentication in Access Appliance
- Configuring storage for LTR
- About the dashboard
- Setting up the storage type for provisioning
- About the CIFS shares
- About managing CIFS shares for Enterprise Vault
- About the NFS shares
- About an iSCSI target
- Creating an iSCSI target and provisioning LUNs
- About S3 buckets for NetBackup
- Using the Access Appliance product documentation
- Changing your password
- Managing storage
- Managing file sharing services
- Monitoring and troubleshooting
- Provisioning and managing file systems
- Creating a file system
- Setting the maximum IOPS
- Creating a snapshot
- Restoring a snapshot
- Configuring a replication job
- Stopping or starting a replication job for VVR
- Pausing and resuming a replication job for VVR
- Enabling or disabling a replication job for VFR
- Synchronizing a replication job for VFR
- Failing over or failing back a replication job for VVR
- Failing over or failing back a replication job for VFR
- Unconfiguring a replication job for VFR
- Unconfiguring a replication job for VVR
- Viewing the list of iSCSI targets
- Adding an initiator for an iSCSI target
- Removing an initiator for an iSCSI target
- Adding portal IPs for an iSCSI target
- Setting up authentication for an iSCSI target
- Viewing the list of initiators for an iSCSI target
- Viewing the portal IPs for an iSCSI target
- Removing portal IPs for an iSCSI target
- Removing authentication settings for an iSCSI target
- Removing an iSCSI target
- Removing the file system store for an iSCSI target
- Viewing the list of LUNs for an iSCSI target
- Creating a LUN for an iSCSI target
- Increasing the size of a LUN for an iSCSI target
- Reducing the size of a LUN for an iSCSI target
- Removing a LUN for an iSCSI target
- Cloning a LUN for an iSCSI target
- Creating a snapshot of a LUN for an iSCSI target
- Viewing the list of snapshots for an iSCSI target
- Removing a LUN snapshot
- Restoring a LUN snapshot
- Provisioning and managing shares
- About file sharing protocols
- About concurrent access
- About concurrent access with NFS and S3
- Sharing directories using CIFS and NFS protocols
- Adding a share
- NFS protocol options
- CIFS protocol options
- About buckets and objects
- About Active Directory (AD)
- Logging on as an active directory user
- Creating access and secret keys for an active directory user
- Exporting an NFS share as an S3 bucket
- Viewing information about a share
- Accessing share details
- Configuring a favorite share
- Deleting a share
- Managing permissions for CIFS shares
- Managing clients for the NFS shares
- Managing policies
- About policies for storage provisioning
- About policies for long-term data retention
- About policies for archiving data using Enterprise Vault
- About policies for file systems
- About pattern matching for data movement policies
- Viewing information about policies
- Activating storage policy templates
- Activating long-term data retention policies
- Activating archival policies
- Creating an S3 bucket
- About cloud-storage tiering
- Workflow for adding a cloud tier
- About tiering policies
- Adding a secondary tier
- Viewing information about the secondary tier
- Adding or editing a tier policy on a secondary tier
- Creating a policy schedule
- Managing settings
- Viewing Access Appliance settings
- About the cloud gateway
- Viewing information about cloud services
- Adding and removing a cloud service
- Viewing discovery information about your cluster
- About the Lightweight Directory Access Protocol
- Configuring LDAP
- Configuring Active Directory
- About user management
- Adding and removing user roles using GUI
- Performing user management using CLISH
- Configuring the NTP server
- Starting or stopping the CIFS or NFS servers
- Starting or stopping the S3 server
- Adding or removing storage pools for S3 users
- Configuring the /etc/hosts file for mapping of S3 users
- Registering a NetBackup master server or an EMM server
- Modifying a NetBackup media server list
- Viewing information about your NetBackup configuration with Access Appliance
- About cluster management
- Setting up the time and the time zone for the cluster
- About replication
- Viewing information about events
- Purging events
- About Access Appliance product licensing
- Setting object server default parameters
- Setting up the object server group-specific parameters
- Viewing information about S3
- Configuring the KMS server
- About the CIFS service management
- Setting up the home directory
- About the File Transfer Protocol
- About Veritas Data Deduplication
- About alert management
- STIG overview for Access Appliance
- FIPS compatibility list
- Index
CIFS protocol options
To share a file system over the CIFS protocol, indicate the following:
What type of access to grant
Table: Access types describes the access types.
Additional export options
Table: Export options describes the export options.
Before the clients can access the NFS share, the NFS service must be running on the Access Appliance cluster.
Table: Access types
Access Type | Description |
|---|---|
Read Only (Default) | Grants read-only permission to the exported share. Files cannot be created or modified. |
Read Write | Grants read and write permission to the exported share. |
Table: Export options
Export Option | Description |
|---|---|
Hide Unreadable | Prevents clients from seeing the existence of files and directories that are not readable to them. |
Guest | Allows restricted access to the share when no user name or password is provided. |
Oplocks | Supports opportunistic locks on the files in this share. |
Full ACL | Allows All Windows Access Control Lists (ACLs). Note: All Windows Access Control Lists (ACLs) are supported except in the case when you attempt using the Windows Explorer folder Properties > Security GUI to inherit down to a non-empty directory hierarchy while denying all access to yourself. |
Veto System Files | Hides system files (lost+found, quotas, quotas.grp) from displaying when using a CIFS normal share. The default is to display the system files. |
Owner | Specifies the owner for the root directory of the exported share. By default, Access Appliance root owns the root directory. CIFS clients can create folders and files in the share. However, there are some operations that require owner privileges. For example, changing the owner itself, and changing permissions of the top-level folder (that is, the root directory). Set the owner to enable the specified user to perform the privileged operations. |
Group | Specifies the primary group owner of the root directory of the exported share. By default, Access Appliance root is the primary group owner. CIFS clients can create folders and files in the share. However, there are some operations that require group privileges. For example, changing the group itself, and changing permissions of the top-level folder (that is, the root directory). Set the group to enable the specified group to perform the privileged operations. |
Create Mask | When a file is created under a file system exported by CIFS, the necessary permissions are calculated by mapping DOS modes to UNIX permission. The resulting UNIX mode is then bit-wise 'AND'ed with this parameter. Any bit not set here is removed from the modes set on a file when it is created. The default is: Create Mask = 0744. |
Dir Mask | When a directory is created under a file system exported by CIFS, the necessary permissions are calculated by mapping DOS modes to UNIX permissions. The resulting UNIX mode is then bit-wise 'AND'ed with this parameter. Any bit not set here is removed from the modes set on a directory when it is created. The default is: Dir Mask = 0755. |
File System Mode | When a file system is exported by CIFS, its mode is set to an fs_mode value. It is the UNIX access control set on a file system, and CIFS options like rw/ro do not take precedence over it. This value is reset to 0755 when the CIFS share is deleted. The default is: FS Mode = 1777. |
Virtual IP | Access Appliance lets you specify a virtual IP address. This address must be part of the Access Appliance cluster, and is used by the system to serve the share internally. |
Allow User and User Groups | Specifies the CIFS local users, local groups, AD users, or AD groups to allow to access the share. |
Deny User and User Groups | Specifies the CIFS local users, local groups, AD users, or AD groups users or groups to deny access to the share. For example, use the Deny User and User Groups option to exclude a particular user that is a member of an allowed group. |