Library Table of Contents Previous Comments

Symbols   A   C   D   E   F   G   H   I   K   L   M   N   O   P   Q   R   S   T   U   V   W   

Index

Symbols  Top

(PC)NFS
clients
authentication support for
file permissions for
creating user entries with
umask
definition of (options pcnfsd.umask)
working with files
/etc/cifs_nbalias.cfg file, creating entries in
/etc/exports file
contents of
exporting entries differently than specified
exporting entries with (exportfs)
how it works
limitation of
rules for entries in
specified resources in
when changes take effect
/etc/ftpusers file
about
editing
format of
/etc/group file, format of
/etc/home_dir file, specifying directories in
/etc/httpd.access file
contents of
directives in
editing
format of
/etc/httpd.group file
about
contents of
editing
ways to create
/etc/httpd.hostprefixes file
/etc/httpd.mimetypes file
/etc/httpd.passwd file
about
contents of
creating and editing
/etc/httpd.translations file
description of
fail rule, adding
map rule, adding
pass rule, adding
redirect rule, adding
/etc/log/adtlog.evt file (external audit file)
/etc/log/cifsaudit.alf file (internal audit file)
/etc/log/httpd.log file
changing file format of
information in
/etc/netgroup file
description of
format of entries
/etc/passwd file
contents of
format of
used by pcnfsd
when created
/etc/shadow file, used by pcnfsd
/etc/symlink.translations file (symbolic link translations)
/etc/symlink.translations file, listing entries in
/etc/usermap.cfg file
contents of
format of
guidelines for mapping names in
how Data ONTAP uses
increasing security in
mapping NT names and UNIX names in

A  Top

access restrictions
for exported resources
interactions of restriction options
meanings of restriction options
Account Migrator, SecureShare
account, Windows guest
accounts, NT guest
ACLs
adding, from Server Manager
changing
from command line
from Server Manager
share-level
displaying from command line
file-level, description of
removal of entries
from command line
from Server Manager
administration tasks, periodic
aliases, NetBIOS
anonymous FTP access, configuring
authentication, setting up for FTP

C  Top

CIFS
credentials, client UID/GID
file renaming by CIFS clients, prevention of
filer limitations
forcing lowercase file naming (options cifs.save_case)
generic UNIX account, definition of
matching users to directories
NFS accessing CIFS files
CIFS commands
cifs access (changes ACL)
cifs access (displays ACL)
cifs access (removes entries from ACL)
cifs audit clear (clears internal event log)
cifs audit save (updates the event log)
cifs broadcast (sends messages to users)
cifs comment (displays and changes filer description)
cifs nbalias (displays list of aliases)
cifs nbalias load (processes entries in cifs_nbalias.cfg)
cifs prefdc (manages preferred domain controllers)
cifs resetdc (reestablishes connection with a domain controller)
cifs restart (restarts CIFS for a filer)
cifs sessions (displays information about Windows 2000 clients)
cifs sessions (displays share and file information for users)
cifs sessions (displays summary session information)
cifs sessions (displays user authentication method)
cifs sessions (displays user security information)
cifs setup (reconfigures CIFS)
cifs shares (creates a share)
cifs shares (deletes share)
cifs shares (displays and changes properties)
cifs sidcache clear (clears all cache entries)
cifs sidcache clear (clears cache entries for a domain)
cifs sidcache clear (clears specific SID entry)
cifs sidcache clear (clears specific user entry)
cifs terminate (disables CIFS for a filer)
cifs terminate (disconnects selected client)
fpolicy disable (disables file screening
fpolicy enable (enables file screening)
fpolicy ext excl add (adds excluded extensions)
fpolicy ext excl remove (removes excluded extensions)
fpolicy ext excl reset (resets to default file screening)
fpolicy ext excl set (replaces list of excluded extensions)
fpolicy ext excl show (displays list of excluded extensions)
fpolicy options default required (requires screening for file access)
fpolicy servers show default (displays screening server status)
fpolicy servers stop default (disconnects file screening server)
fpolicy show (displays file policy information)
options cifs.audit.autosave.file.extension counter (specifies automatic counter extensions)
options cifs.audit.autosave.file.extension timestamp (specifies automatic timestamp extensions)
options cifs.audit.autosave.limit (specifies maximum automatic saves)
options cifs.audit.autosave.onsize.enable (saves automatically by log size)
options cifs.audit.autosave.onsize.threshold (specifies log size threshold)
options cifs.audit.autosave.ontime.interval (specifies a time interval for automatic saves)
options cifs.audit.enable (enables and disables auditing)
options cifs.audit.file_access_events.enable (enables and disables file access auditing)
options cifs.audit.logon_events.enable (enables and disables auditing of logon and logoff events)
options cifs.audit.logsize (specifies maximum size of internal event log)
options cifs.audit.saveas (saves as different event log)
options cifs.home_dir (specifies home directory paths)
options cifs.home_dir (stops offering home shares)
options cifs.home_dir_namestyle (specifies naming style of home directories)
options cifs.idle_timeout (specifies idle session timeout)
options cifs.netbios_aliases (specifies NetBIOS aliases for filer)
options cifs.netbios_over_tcp.enable (enables or disables NetBIOS over TCP)
options cifs.nfs_root_ignore_acl (allows access to root volume with NTFS security)
options cifs.oplocks.enable (enables system-wide oplock)
options cifs.oplocks.opendelta (changes delay time for sending breaks)
options cifs.perm_check_ro_del_ok (allows deletion of files with read-only bit set)
options cifs.perm_check_user_gid (sets GID to grant access)
options cifs.save_case (forces lowercase file names)
options cifs.shutdown_msg_level (specifies which users receive shutdown messages)
options cifs.sidcache.enable (enables and disables SID-to-name map cache)
options cifs.sidcache.lifetime (changes lifetime of mapping entries)
options cifs.symlinks.cycleguard (disables access to cyclic directory structures)
options cifs.symlinks.enable (enables CIFS clients to follow symbolic links)
options cifs.trace_login (traces CIFS logins by NFS clients)
options fpolicy.enable (turns file policies on or off)
options wafl.default_unix_user (creates generic account)
CIFS protocol
accessing others' home directories
accessing root volume with NTFS security (options cifs.nfs_root_ignore_acl)
ACLs
file-level
share-level
adding ACL entries with Server Manager
audit events, list of
auditing
description of
external log file, /etc/log/adtlog.evt
internal log file, /etc/log/cifsaudit.alf
prerequisites for
auditing of logon and logoff events, enabling and disabling (options cifs.audit.logon_events.enable)
changing filer description using Server Manager
changing from command line (cifs access)
cifsconfig.cfg file
clearing event audit log (cifs audit clear)
creating generic user account (options wafl.default_unix_user)
creating UNIX accounts for CIFS users
default setting of GID
disabling
for the filer (cifs terminate)
disabling access to cyclic directory structures (options cifs.symlinks.cycleguard)
disconnecting clients using command line (cifs terminate)
disconnecting clients with Server Manager
displaying
ACLs, from command line (cifs access)
session information
share and file information for users (cifs sessions)
summary session (cifs sessions)
user security information (cifs sessions)
displaying file policy information (fpolicy show)
event detail displays
description of
from UNIX
from Windows
lost record
unsuccessful file access
event log
automatic counter extensions
automatic file naming
automatic saves
automatic timestamp extensions
clearing internal log (cifs audit clear)
enabling automatic saves by log size (options cifs.audit.autosave.onsize.enable)
how updated
saving as a different log file (options cifs.audit.saveas)
size and format of
specifying a time interval for automatic saves (options cifs.audit.autosave.ontime.interval)
specifying counter extensions (options cifs.audit.autosave.file.extension counter)
specifying log size threshold (options cifs.audit.autosave.onsize.threshold)
specifying maximum automatic saves (options cifs.audit.autosave.limit)
specifying maximum size of internal log (options cifs.audit.logsize)
specifying timestamp extensions (options cifs.audit.autosave.file.extension timestamp)
updating (cifs audit save)
valid size thresholds
valid time intervals
ways to save
file access auditing, enabling and disabling (options cifs.audit.file_access_events.enable)
file screening
adding excluded extensions (fpolicy ext excl add)
disabling (fpolicy disable)
disconnecting file screening server (fpolicy servers stop default)
displaying list of excluded extensions (fpolicy ext excl show)
displaying screening server status (fpolicy servers show default)
enabling (fpolicy enable)
policy information, example
removing excluded extensions (fpolicy ext excl remove)
replacing list of excluded extensions (fpolicy ext excl set)
requiring screening for file access (fpolicy options default required)
resetting default file screening (fpolicy ext excl reset)
specifying screening
file screening policy
filer description, displaying and changing
home directories
accessing
creating directories in
description of
naming styles, description of
paths, specifying (options cifs.home_dir)
specifying name style (options cifs.home_dir_namestyle)
home shares
stop offering (options cifs.home_dir)
syntax using UNC name
idle sessions
description of
timeout, specifying (options cifs.idle_timeout)
local groups
creating
definition of
deleting
removing members from
with SnapMirror
managing through Server Manager and User Manager
mapping inconsistencies with WAFL credential cache
mapping NT account to UNIX root
method of changing share-level ACL
migrating accounts to passwd/group files
multiprotocol to NTFS-only, effects of
NetBIOS aliases, creating (options cifs.netbios_aliases)
NetBIOS over TCP
description of
disabling (options cifs.netbios_over_tcp.enable)
NTFS-only to multiprotocol, effects of
oplocks
changing delay time for sending breaks (options cifs.oplocks.opendelta)
delay time for sending breaks, description
description of
filer and client oplock settings
managing
setting of for each qtree (qtree oplocks)
system-wide oplock (options cifs.oplocks.enable)
when to use
optimizing client access to NFS directory
passwd file when created
preventing from starting at reboot
quotas and generic user account
reconfiguring
cifs setup
description of
removing entries from ACL
from command line (cifs access)
with Server Manager
restarting
for a filer (cifs restart)
sending messages
description of
from command line (cifs broadcast)
from Server Manager
Server Manager, limitations of
setting specific users to receive UNIX credentials
shared directories, description of
share-level ACLs
reason for changing
using GIDs with
shares
creating using command line (cifs shares)
creating using Server Manager
deleting from command line (cifs shares)
deleting from Server Manager
description of
differences between home and other shares
displaying and changing properties from command line (cifs shares)
displaying and changing properties from Server Manager
forcegroup
GID, specifying effect on file access (options cifs.perm_check_user_gid)
group membership
number of users, specifying
shutdown messages, specifying users that receive
SID-to-name map cache
changing lifetime of entries (options cifs.sidcache.lifetime)
clearing (cifs sidcache clear)
description of
enabling and disabling (options cifs.sidcache.enable)
symbolic links
how CIFS clients follow
options for accessing
symbolic links as home directory names
tracing CIFS logins by NFS clients (options cifs.trace_login)
turning file policies on or off (options fpolicy.enable)
User Manager, limitations of
viewing event audit log (Event Viewer)
WAFL mapping inconsistencies
Windows guest accounts
creating/deleting
description of
configuration files, accessing
contents
of /etc/exports file
of /etc/passwd file
of /etc/usermap.cfg file
cyclic directory structures
description of

D  Top

DAFS
client-server implementation
information required for setup
multiprotocol access to files
DAFS authentication
types of authentication sessions
types of client access
DAFS commands
dafs access (manages client access to DAFS exports)
dafs attach (attaches DAFS to a VI NIC)
dafs detach (detaches DAFS from a VI NIC)
dafs export (manages DAFS export points)
dafs setup (reconfigures DAFS)
dafs start (starts DAFS on a filer)
dafs stats (obtains DAFS statistics)
dafs status (displays status for DAFS protocol, sessions, and VI NICs)
dafs stop (stops DAFS on a filer)
DAFS exports
adding clients to the export's ACL
creating
destroying
disabling
displaying ACLs
enabling a disabled export
listing export points
managing access control lists (ACLs) for clients
modifying read or write attributes
reexporting
DAFS performance
displaying DAFS state
displaying DAFSsessions and requests
displaying filer statistics
displaying VI NIC sessions
displaying VI NIC status
obtaining DAFS statistics
viewing client sessions
DAFS protocol
persistently enabling or disabling
starting DAFS on a filer
stopping DAFS on a filer
transport requirements
DAFS VI NICs
attaching
detaching
data access management
Data ONTAP
converting to Unicode-formatted directories
creating Unicode-formatted directories (options wafl.create_ucode)
cyclic directory structures
directory structures, NFS and CIFS
file locking
file name creation
how usermap.cfg file is used
mapping NT names and UNIX names in
matching users to directories using CIFS
obtaining the GID
obtaining the UID
overview
read-only bit
SecureShare Access, description of
shared file permissions
using NTFS to determine file access
using UNIX credentials for filer access
directory structures
converting to Unicode-formatted directories
creating Unicode-formatted directories
cyclic directories
NFS and CIFS
disk shelves
disks
data
parity
spare
domain controller, selecting

E  Top

environmental adapter, filer main unit
exported resources
access restrictions for
from different directory hierarchy levels
matched against NFS mount requests
rules for exporting
to a subnet, reasons for
ways to export
exporting resources, to a netgroup

F  Top

file access
effects of GID in
mapping entries to WAFL credential cache
NFS access of CIFS files, description of
file locking
description of
NFS operations affected by
file name conventions, in multiprotocol environment
file names
conventions, in multiprotocol environment
creating lowercase (options cifs.save_case)
creation
file permissions, umask for (PC)NFS clients
file renaming
forcing lowercase (options cifs.save_case)
preventing
file screening policy
filer access
from a CIFS client
filer main unit components
filers
CIFS description
CIFS limitations with
managing CIFS through Server Manager and User Manager
restarting CIFS
FilerView, use for filer administration
FTP commands
options ftpd.anonymous.enable (enables or disables anonymous FTP access)
options ftpd.anonymous.home_dir (specifies a home directory for the anonymous user)
options ftpd.anonymous.name (specifies a name for anonymous login)
options ftpd.auth_style (specifies authentication style)
options ftpd.enable (enables the FTP daemon)
options ftpd.idle_timeout (specifies the timeout value for idle connections)
options ftpd.max_connections (specifies maximum number of concurrent FTP connections)
options ftpd.tcp_window_size (specifies the TCP window size)
FTP service
anonymous access
configuring
options for
authentication styles
about configuring
configuring Mixed
configuring NTLM
configuring UNIX
Mixed, description of
NTLM, description of
types of
UNIX, description of
denying users access to
enabling
ftpd daemon
log files
types of
viewing
setting up
ftp.cmd file, description of
ftp.xfer file, description of

G  Top

generic UNIX account
definition of
prerequisites for
generic user account
creating (options wafl.default_unix_user)
group membership, how determined by pcnfsd
guest accounts, Windows
guidelines for mapping NT/UNIX names

H  Top

home directories
accessing others' home directories
CIFS accessing of
CIFS naming style in
CIFS, description of
creating CIFS directories
naming style, specifying
wide symbolic links in
home directory paths
specifying (options cifs.home_dir)
specifying in /etc/home_dir file
home shares, stop offering for use (options cifs.home_dir)
HTTP commands
fail (adds fail rule to translation file)
httpstat (displays statistics)
httpstat (resetting statistics)
map (adds map to translation file)
options httpd.access (restricts access to HTTP services)
options httpd.admin.access (restricts access to filer administration via HTTP)
pass (adds pass rule to translation file)
redirect (adds redirect rule to translation file)
HTTP service
about setting up
license requirements
log file
information in
viewing
mapping file name suffix to MIME value
MIME Content-Type values
rules
fail, adding
map, adding
pass, adding
processing URL translation
redirect, adding
security
authentication methods
basic authentication
levels of
marking an untrusted subnet
NTLM authentication
protection, Web page
restricting access (ifconfig)
restricting access, options for
user password
using virtual firewall
Web page protection
starting the service
statistics
description of
displaying (httpstat)
resetting (httpstat)
testing the service
virtual hosting
description of
mapping virtual host addresses (ifconfig)
setting up

I  Top

idle sessions
description of
timeout, specifying (options cifs.idle_timeout)

K  Top

Kerberos, secure NFS access

L  Top

LCD, filer main unit
licenses, HTTP service
local user accounts
managing
reasons for specifying
LUNs, defined

M  Top

Map entries
creating
description
how to list
how used
requirements
mapped NT/UNIX names
mapping NT/UNIX names, guidelines for
Migrator, SecureShare Account
MIME Content-Type values
mount requests, matched with exported resources
multiprotocol environment, file naming conventions
multiprotocol filer to NTFS-only filer, effects of

N  Top

name creation, file
names (usermap.cfg file), mapped NT/UNIX
names, guidelines for mapping NT/UNIX
NetBIOS aliases
/etc/cifs_nbalias.cfg file, about
creating in /etc/cifs_nbalias.cfg file
displaying list of (cifs nbalias)
processing entries in cifs_nbalias.cfg file (cifs nabalias load)
ways to create
NetBIOS over TCP
description of
disabling
NetBIOS, aliases
network commands
ifconfig (mapping virtual host addresses)
ifconfig (restricting HTTP access over subnet)
NFS commands
exportfs (exports entries in exports file)
exportsfs (exports all entries in exports file)
option nfs.v4.id_domain (specifies user ID domain)
options nfs.kerberos.file_keytab.enable (enables file-based keytab)
options nfs.kerberos.principal (sets up an NFS server principal)
options nfs.kerberos.realm (specifies the Kerberos realm)
options nfs.vN.enable (enables and disables NFS versions)
options pcnfsd (enables and disables pcnfsd)
options pcnfsd.umask (defines umask)
NFS protocol
(PC)NFS
clients, authentication of
creating user entries with
absolute symbolic links, redirecting for CIFS clients
accessing CIFS files, description of
contents of exports file
different restrictions for different hosts, specifying
enabling and disabling versions (options nfs.vN.enable)
exportfs command
purposes of
rules for specifying multiple access restrictions
targets that can be specified
exporting
entries differently than specified in exports file
resources to a netgroup
resources to subnet
to netgroups, restrictions of
to targets
file renaming by CIFS clients, prevention of
format of export target to subnet
format of netgroup entry
mapping inconsistencies with WAFL credential cache
mount requests, matched with exported resources
netgroups, description of
optimizing CIFS access to NFS directory
pcnfsd daemon
determining group membership
enabling and disabling (options pcnfsd)
relationship of netgroup and netgroup.byhost map
resources clients can mount
restrictions for all hosts, specifying
root access restrictions for all clients, specifying
root access restrictions for some clients, specifying
root access with
rules for specifying an exports entry
same root access restrictions for all clients, specifying
secure NFS access
secure NFS access, implementation restrictions of
secure NFS access, setting
security service
description of
specifying
symbolic links, description of with CIFS
umask
and (PC)NFS-created files
definition of (options pcnfsd.umask)
unexporting resources
version 4
limitations
pseudo-fs effect on mount points
specifying user ID domain (option nfs.v4.id_domain)
support
WAFL mapping inconsistencies
WebNFS
configuring
NT/UNIX names (usermap.cfg file), mapped
NT/UNIX names, guidelines for mapping
NTFS-only filer to multiprotocol filer, effects of
NVRAM

O  Top

oplocks
changing delay time for sending breaks (options cifs.oplocks.opendelta)
delay time for sending breaks, description
description of
filer and client settings
managing
setting of for each qtree (qtree oplocks)
system-wide (options cifs.oplocks.enable)
when to use
options
ftpd.anonymous.name

P  Top

pcnfsd daemon
determining group membership
enabling and disabling (options pcnfsd)
how it provides authentication
permissions
changing UNIX, description of
changing, using SecureShare Access
for shared files
preferred domain controller, specifying

Q  Top

qtrees
administrative actions
description
setting oplocks for each (qtree oplocks)

R  Top

RAID groups, definition of
read-only bit
deleting files when set (options cifs.perm_check_ro_del_ok)
description of
resources
definition of
NFS clients can mount
unexporting of
ways to export
root directory, for WebNFS lookup
rules
for exporting resources
URL translation

S  Top

SecureShare Access
changing permissions with
description of
installing
SecureShare Account Migrator
security
levels for HTTP
restricting HTTP access
security styles
Kerberos
client support
enabling keytab (nfs.kerberos.file_keytab.enable)
implementation
setting up an NFS server principal (options nfs.kerberos.principal)
setting up for UNIX
setting up for Windows 2000
specifying the Kerberos realm (options nfs.kerberos.realm)
specifying for NFS access
serial ports, filer main unit
Server Manager
adding entries to ACL
changing CIFS filer description
creating a share
disconnecting clients
displaying and changing ACLs
displaying share properties
limitations of
managing CIFS
removing entries from ACL
sending messages
session information (CIFS), displaying
shared directories, description of
shared resources
with NFS and (PC)NFS clients
with WebNFS clients
share-level ACLs
changing
using GIDs
shares
creating
from command line (cifs shares)
from Server Manager
deleting
description of
differences between home and other shares
displaying and changing properties
from command line (cifs shares)
forcegroup
group membership
number of users, specifying
share boundary checking for symbolic links
disabling
specifying
umask value, description
virus scanning, specifying
wide symbolic links, enabling
SID-to-name map cache
changing lifetime of entries
clearing (cifs sidcache clear)
description of
enabling and disabling
slots, filer main unit
statistics
HTTP, description of
symbolic links
absolute links
redirecting for CIFS clients
redirecting using Map entries
redirecting using Widelink entries
as CIFS home directory names
description of
disabling share boundary checking for
description of
limitations of
requirements for
enabling CIFS clients to follow (options cifs.symlinks.enable)
options for CIFS access to
preventing links to files
ways to redirect
wide, enabling for a share
system board, filer main unit
system memory, filer main unit

T  Top

translation, rules for URL

U  Top

umask value, description
UNC name, syntax for specifying home share
Unicode format, directory structure
UNIX credentials, description of
UNIX permissions, changing
UNIX user name, special characters in
URL translation rules
user authentication method, displaying
User Manager
creating a local group
deleting group
limitations of
managing CIFS
removing members from group

V  Top

virtual firewall, for HTTP
virtual hosting for HTTP
virus scanning, specifying for a share
volumes
administrative actions
defined
RAID groups, definition of

W  Top

WAFL credential cache
adding entries to (wcc)
deleting entries in (wcc)
description of
displaying cache statistics (wcc)
mapping inconsistencies
description of
with a CIFS name
with a UNIX name
monitoring
setting length of validity (options wafl.wcc_minutes_valid)
Web page protection
WebNFS
configuring
root directory
wide symbolic links
enabling for a share
in home directories
Widelink entries
creating
description
how to list
how used
limitations
requirements
Windows guest account
Windows NT commands, performing Windows filer tasks
Windows user name
conversion from Windows 2000 format to pre-Windows 2000 format
different formats
WINS server addresses, changing

Symbols   A   C   D   E   F   G   H   I   K   L   M   N   O   P   Q   R   S   T   U   V   W   

Library Table of Contents Previous Comments

Copyright © 1994-2003, Network Appliance, Inc. All rights reserved.
Part No. 210-00323
File: bookix.htm
Last updated: 01/15/03 15:46:17