If you have only CIFS clients in your environment and your filer was set up as a multiprotocol filer, you must have at least one Windows account that has root privilege for accessing files on the filer. Otherwise, you cannot manage the filer because you do not have access to files with UNIX-style security, which may include some configuration files in the /etc directory.
If your filer was set up as NTFS-only, however, the /etc directory has a file-level ACL that enables the Administrators group to access the Data ONTAP configuration files.
To map at least one Windows account to root, complete the following steps.
| 1 | ||
You want to map all accounts in the Administrators group to root |
Complete only Step 2. |
|
| 2 | Verify that the wafl.nt_admin_priv_map_to_root option is set to On. ResultAll accounts in the Administrators group are considered root, even if you do not have an /etc/usermap.cfg entry mapping the accounts to root. If you create a file using an account that belongs to the Administrators group, the file is owned by root when you view the file from a UNIX client. |
|
| 3 | For each account that maps to root, add an /etc/usermap.cfg entry. Note |
|
| 4 | Disable the wafl.nt_admin_priv_map_to_root option with the following command: options wafl.nt_admin_priv_map_to_root off ResultAccounts in the Administrators group no longer map to root. You can use only those accounts that you map to root in the /etc/usermap.cfg file to access files with UNIX-style security. Each account in the Administrators group has a separate UNIX ID. |
|
Copyright © 1994-2003, Network Appliance, Inc. All rights
reserved.
Part No. 210-00473
File: cifs14.htm
Last updated: 11/25/03 18:02:42