Data ONTAP™ 6.5
System Administration File Access Management Guide

View in Frames

Preface

Chapter 1: Introduction to Network Appliance Filers
About filers
How you administer a filer
About filer main unit components
About disk shelves
About Data ONTAP
Filer administration with Data ONTAP
Getting command information in Data ONTAP
Documentation for Data ONTAP

Chapter 2: File Access Using NFS
How resources become available to NFS clients
Access restrictions for exported resources
How /etc/exports works
	Specifying access restrictions in /etc/exports
	Specifying root access in /etc/exports
	Specifying security services
	Exporting resources to netgroups from /etc/exports
	Exporting resources to subnets from /etc/exports
Exporting or unexporting resources using the exportfs command
Providing secure NFS access
	NFS mountd traces
Enabling and disabling NFS versions
Using NFSv4
File sharing with (PC)NFS clients
	Enabling or disabling the pcnfsd daemon
	Creating (PC)NFS user entries on the filer
Defining the umask for (PC)NFS-created files and directories
Configuring Data ONTAP for WebNFS

Chapter 3: File Access Using CIFS
Filer management through Windows administrative tools
Displaying and changing the description of the filer
Creating NetBIOS aliases for the filer
Disabling NetBIOS over TCP
How to specify a filer's Windows name
How to change a filer's computer account password
How CIFS users obtain UNIX credentials
	How Data ONTAP maps user names
	How to specify entries for the /etc/usermap.cfg file
	How Data ONTAP interprets domain names in /etc/usermap.cfg
	Examples of usermap.cfg entries
	Guidelines and recommendations for mapping user names
	Mapping a Windows account to root
	Mapping UNIX names to UIDs and GIDs
	Migrating CIFS user accounts to the passwd and group files
	Creating or disabling the default UNIX user account
	Enabling or disabling the Windows guest user account
Sharing directories on the filer
Displaying and changing share properties
Deleting a share
CIFS limitations
Understanding authentication issues
Using null sessions to access filer storage in non-Kerberos environments
Understanding local user accounts
Creating local groups on the filer
Understanding home directories on the filer
How Data ONTAP matches a directory with a user
Setting up user home directories
	Specifying home directory paths
	Specifying the naming style of home directories
	Creating directories in a home directory path
Accessing home directories
Specifying support for wide symbolic links in home directories
How to stop offering home shares
How share-level access control lists work
Specifying how group IDs work with share-level ACLs
Changing and displaying a share-level ACL
Changing and displaying file-level ACLs
Understanding the SID-to-name map cache
	Enabling and disabling the SID-to-name map cache
	Changing the lifetime of SID-to-name mapping entries
	Clearing the SID-to-name map cache
Understanding file screening
Enabling and disabling file screening
Managing file policies
Managing file screening servers
Sending a message to all users on a filer
Understanding CIFS auditing
	Configuring Data ONTAP for CIFS auditing
	Saving and clearing audit events
	Understanding event detail displays
Understanding oplocks
Managing oplocks
Displaying CIFS session information
Timing out idle sessions
Disabling CIFS service
	Disconnecting selected clients
	Disabling CIFS for the entire filer
	Specifying which users receive CIFS shutdown messages
Restarting CIFS service
Reconfiguring CIFS for the filer
Selecting domain controllers

Chapter 4: File Access Using FTP
Understanding FTP service on the filer
Setting up FTP service on your filer
	Enabling the FTP service on your filer
	Changing the FTP file size
	FTP file locking
	Configuring an authentication style
	Configuring anonymous access to your filer
Denying access to the FTP service
Viewing FTP log files and connection statistics
Number of log files per FTP session
Managing FTP connections

Chapter 5: File Access Using HTTP
Starting the HTTP service
Testing the HTTP service
Specifying the filer response to HTTP requests
	Adding the map rule
	Adding the redirect rule
	Adding the pass rule
	Adding the fail rule
Configuring MIME Content-Type values
Maintaining HTTP service security
	Using HTTP options to restrict access
	Using an HTTP virtual firewall
	Protecting Web pages
	Editing the /etc/httpd.access file
	Creating and editing httpd.passwd and httpd.group files
Using virtual hosting
Displaying HTTP statistics
Viewing HTTP connection information

Chapter 6: File Access Using WebDAV
Understanding the WebDAV protocol

Chapter 7: File Sharing Between NFS and CIFS
Understanding NFS and CIFS file naming
Understanding file locking between protocols
Understanding read-only bits
Controlling CIFS access to symbolic links
	Understanding how CIFS clients interact with symbolic links
	About Map entries
	About Widelink entries
	About disabling share boundary checking for symbolic links
	Redirecting absolute symbolic links
	Preventing access by CIFS clients to cyclic directory structures
Optimizing NFS directory access for CIFS clients
Preventing CIFS clients from creating uppercase file names
Accessing CIFS files from NFS clients
	Adding mapping entries to the WAFL credential cache
	Deleting mapping entries from the WAFL credential cache
	Setting how long mapping entries are valid
	Monitoring WAFL credential cache statistics
	Managing mapping inconsistencies
Installing SecureShare Access
Changing UNIX permissions and DOS attributes from Windows

Chapter 8: File Access Using DAFS
Understanding the DAFS protocol
Understanding the DAFS service implementation
Configuring the DAFS service
Starting and stopping the DAFS service
Attaching and detaching network devices
Understanding session authentication
Managing exports for DAFS service
Managing client host access to DAFS exports
Measuring DAFS performance
Displaying DAFS status
Configuring DAFS with options

Glossary

Index

Legal Information

Data ONTAP™ 6.5 System Administration File Access Management Guide

Data ONTAP™ 6.5
System Administration File Access Management Guide