How to manage the WAFL credential cache

The default configuration

The default configuration stores each WAFL credential for 20 minutes. This is generally sufficient for most situations.

Two ways to manage the WAFL credential cache

You can manage the cache globally with options and specifically with the wcc command. This enables you to add entries to and remove entries from the WAFL credential cache and to troubleshoot file access problems that might be caused by mapping problems.

Note: If you make changes to the WAFL credential cache and an NFS client has cached information, it can take a noticeable amount of time for the changes to become visible.

Global cache management options

If the default configuration does not work well for your site, you can use an option to set how long each WAFL credential cache entry is valid. You can also trace CIFS logins as an aid to debugging mapping problems.

To set how long each WAFL credential cache entry is valid, use the wafl.wcc_minutes_valid option, as described in "Setting how long each WAFL credential cache entry is valid."
To display information about every CIFS login attempt, use the CIFS login tracing feature, as described in "Toggling CIFS login tracing."

When to use the wcc command

You use the wcc command to perform the following tasks:

Add names to or remove names from the WAFL credential cache, as described in "Adding an entry to the WAFL credential cache" and "Deleting entries from the WAFL credential cache"
Monitor the WAFL credential cache by displaying statistics about it, as described in "Displaying WAFL credential cache statistics."
Troubleshoot file access and other problems by displaying what name mappings would be, as described in "Displaying a mapping result for a UNIX name" and "Displaying a mapping result for a Windows name."

The wcc command syntax

The wcc command has five basic types, each with its own function. The type is determined by the first option, as follows:

wcc -a adds a name to the WAFL credential cache.
wcc -d displays statistics about the WAFL credential cache.
wcc -s displays what the mapping of a Windows NT name would be.
wcc -u displays what the mapping of a UNIX name would be.
wcc -x removes entries from the WAFL credential cache.

The wcc command options

Each wcc command type has a different set of options, as shown in the following table.


Type	Other options	Function
wcc -a	-u uname -i ip-addr [-v]	Adds the name to the WAFL credential cache. The `-v` option displays Windows NT groups.
wcc -d	[-v] ...	Displays the following statistics about the WAFL credential cache: Number of entries in the cache Age of the oldest entry Number of Administrator-privileged entries The `-v` option adds mappings for every user.
wcc -s	ntname [-i ip-addr] [-v]	Displays what the current mapping of the specified name would result in, but does not change the WAFL credential cache. The `-v` option displays numeric SIDs.
wcc -u	uname [-i ip-addr] [-v]
wcc -x	[-f] [-v]	Removes all entries from the WAFL credential cache. The `-v` option displays how many entries have been removed.
	-i ip-addr [-v]	Removes all entries from the WAFL credential cache with the same IP address. The `-v` option displays how many entries have been removed.
	-s ntname [-i ip-addr] [-v]	Removes the entries with the given Windows NT name and optional qualifying IP address. If the Windows NT name is the name of a group, removes all members of that group from the WAFL credential cache. The `-v` option displays how many entries have been removed.
	-u uname [-i ip-addr] [-v]	Removes the entries with the given UNIX name and optional qualifying IP address. The `-v` option displays how many entries have been removed.

The -v option increases the level of detail of information. The kind of information varies with each command. You can have up to three instances of the -v option (-vvv) per command. Each repetition of the option increases the level of detail; three instances provide statistics that are only of interest to Network Appliance Technical Support.

Part No. 210-02334
File: multi23.htm
Last updated: 02/24/99 12:16:17