exit frames
System Administration File Access Management Guide
Data ONTAP 6.4
Preface
Chapter 1: Introduction to Network Appliance Filers
About filers
How you administer a filer
About filer main unit components
About disk shelves
About Data ONTAP
Filer administration with Data ONTAP
Getting command information in Data ONTAP
Documentation for Data ONTAP
Chapter 2: File Access Using NFS
How resources become available to NFS clients
Access restrictions for exported resources
How /etc/exports works
Specifying access restrictions in /etc/exports
Specifying root access in /etc/exports
Specifying security services
Exporting resources to netgroups from /etc/exports
Exporting resources to subnets from /etc/exports
Exporting or unexporting resources using the exportfs command
Providing secure NFS access
Enabling and disabling NFS versions
Using NFSv4
File sharing with (PC)NFS clients
Enabling or disabling the pcnfsd daemon
Creating (PC)NFS user entries on the filer
Defining the umask for (PC)NFS-created files and directories
Configuring Data ONTAP for WebNFS
Chapter 3: File Access Using CIFS
Filer management through Server Manager and User Manager
Displaying and changing the description of the filer
Creating NetBIOS aliases for the filer
How to specify a Windows name
How CIFS users obtain UNIX credentials
How Data ONTAP maps names
How to specify entries for the /etc/usermap.cfg file
How Data ONTAP interprets domain names in /etc/usermap.cfg
Examples of usermap.cfg entries
Guidelines and recommendations for mapping users
Mapping a Windows account to root
Mapping UNIX names to UIDs and GIDs
Migrating CIFS user accounts to the passwd and group files
Creating or disabling the default UNIX user account
Enabling or disabling the Windows guest user account
Sharing directories on the filer
Displaying and changing share properties
Deleting a share
CIFS limitations
Understanding local user accounts
Creating local groups on the filer
Understanding home directories on the filer
How Data ONTAP matches a directory with a user
Setting up user home directories
Specifying home directory paths
Specifying the naming style of home directories
Creating directories in a home directory path
Accessing home directories
Specifying support for wide symbolic links in CIFS home directories
How to stop offering home shares
How share-level access control lists work
Specifying how GIDs work with share-level ACLs
Changing and displaying a share-level ACL
Changing and displaying file-level ACLs
Understanding the SID-to-name map cache
Enabling and disabling the SID-to-name map cache
Changing the lifetime of SID-to-name mapping entries
Clearing the SID-to-name map cache
Understanding file screening
Enabling and disabling file screening
Managing file policies
Managing file screening servers
Sending a message to all users on a filer
Understanding CIFS auditing
Configuring Data ONTAP for CIFS auditing
Saving and clearing audit events
Understanding event detail displays
Understanding oplocks
Managing oplocks
Displaying CIFS session information
Timing out idle sessions
Disabling CIFS service
Disconnecting selected clients
Disabling CIFS for the entire filer
Specifying which users receive CIFS shutdown messages
Restarting CIFS service
Reconfiguring CIFS for the filer
Selecting domain controllers
Disabling NetBIOS over TCP
Chapter 4: File Access Using FTP
Understanding FTP service on the filer
Setting up FTP service on your filer
Enabling the FTP service on your filer
Configuring an authentication style
Configuring anonymous access to your filer
Denying access to the FTP service
Viewing FTP log files
Chapter 5: File Access Using HTTP
Starting the HTTP service
Testing the HTTP service
Specifying the filer response to HTTP requests
Adding the map rule
Adding the redirect rule
Adding the pass rule
Adding the fail rule
Configuring MIME Content-Type values
Maintaining HTTP service security
Using HTTP options to restrict access
Using an HTTP virtual firewall
Protecting Web pages
Editing the /etc/httpd.access file
Creating and editing httpd.passwd and httpd.group files
Using virtual hosting
Displaying HTTP statistics
Viewing HTTP connection information
Chapter 6: File Access Using DAFS
Understanding the DAFS protocol
Understanding the DAFS service implementation
Configuring the DAFS service
Starting and stopping the DAFS service
Attaching and detaching network devices
Understanding session authentication
Managing exports for DAFS service
Managing client host access to DAFS exports
Measuring DAFS performance
Displaying DAFS status
Configuring DAFS with options
Chapter 7: File Sharing Between NFS and CIFS
Understanding NFS and CIFS file naming
Understanding file locking between protocols
Understanding read-only bits
Controlling CIFS access to symbolic links
Understanding how CIFS clients interact with symbolic links
About Map entries
About Widelink entries
About disabling share boundary checking for symbolic links
Redirecting absolute symbolic links
Preventing access by CIFS clients to cyclic directory structures
Optimizing NFS directory access for CIFS clients
Preventing CIFS clients from creating uppercase file names
Accessing CIFS files from NFS clients
Adding mapping entries to the WAFL credential cache
Deleting mapping entries from the WAFL credential cache
Setting how long mapping entries are valid
Monitoring WAFL credential cache statistics
Managing mapping inconsistencies
Installing SecureShare Access
Changing UNIX permissions and DOS attributes from Windows
Glossary
Index