Indexexit frames


System Administration File Access Management Guide
Data ONTAP™ 6.5

Preface

 

Chapter 1: Introduction to Network Appliance Filers

About filers

How you administer a filer

About filer main unit components

About disk shelves

About Data ONTAP

Filer administration with Data ONTAP

Getting command information in Data ONTAP

Documentation for Data ONTAP

 

Chapter 2: File Access Using NFS

How resources become available to NFS clients

Access restrictions for exported resources

How /etc/exports works

 

Specifying access restrictions in /etc/exports

 

Specifying root access in /etc/exports

 

Specifying security services

 

Exporting resources to netgroups from /etc/exports

 

Exporting resources to subnets from /etc/exports

Exporting or unexporting resources using the exportfs command

Providing secure NFS access

 

NFS mountd traces

Enabling and disabling NFS versions

Using NFSv4

File sharing with (PC)NFS clients

 

Enabling or disabling the pcnfsd daemon

 

Creating (PC)NFS user entries on the filer

Defining the umask for (PC)NFS-created files and directories

Configuring Data ONTAP for WebNFS

 

Chapter 3: File Access Using CIFS

Filer management through Windows administrative tools

Displaying and changing the description of the filer

Creating NetBIOS aliases for the filer

Disabling NetBIOS over TCP

How to specify a filer's Windows name

How to change a filer's computer account password

How CIFS users obtain UNIX credentials

 

How Data ONTAP maps user names

 

How to specify entries for the /etc/usermap.cfg file

 

How Data ONTAP interprets domain names in /etc/usermap.cfg

 

Examples of usermap.cfg entries

 

Guidelines and recommendations for mapping user names

 

Mapping a Windows account to root

 

Mapping UNIX names to UIDs and GIDs

 

Migrating CIFS user accounts to the passwd and group files

 

Creating or disabling the default UNIX user account

 

Enabling or disabling the Windows guest user account

Sharing directories on the filer

Displaying and changing share properties

Deleting a share

CIFS limitations

Understanding authentication issues

Using null sessions to access filer storage in non-Kerberos environments

Understanding local user accounts

Creating local groups on the filer

Understanding home directories on the filer

How Data ONTAP matches a directory with a user

Setting up user home directories

 

Specifying home directory paths

 

Specifying the naming style of home directories

 

Creating directories in a home directory path

Accessing home directories

Specifying support for wide symbolic links in home directories

How to stop offering home shares

How share-level access control lists work

Specifying how group IDs work with share-level ACLs

Changing and displaying a share-level ACL

Changing and displaying file-level ACLs

Understanding the SID-to-name map cache

 

Enabling and disabling the SID-to-name map cache

 

Changing the lifetime of SID-to-name mapping entries

 

Clearing the SID-to-name map cache

Understanding file screening

Enabling and disabling file screening

Managing file policies

Managing file screening servers

Sending a message to all users on a filer

Understanding CIFS auditing

 

Configuring Data ONTAP for CIFS auditing

 

Saving and clearing audit events

 

Understanding event detail displays

Understanding oplocks

Managing oplocks

Displaying CIFS session information

Timing out idle sessions

Disabling CIFS service

 

Disconnecting selected clients

 

Disabling CIFS for the entire filer

 

Specifying which users receive CIFS shutdown messages

Restarting CIFS service

Reconfiguring CIFS for the filer

Selecting domain controllers

 

Chapter 4: File Access Using FTP

Understanding FTP service on the filer

Setting up FTP service on your filer

 

Enabling the FTP service on your filer

 

Changing the FTP file size

 

FTP file locking

 

Configuring an authentication style

 

Configuring anonymous access to your filer

Denying access to the FTP service

Viewing FTP log files and connection statistics

Number of log files per FTP session

Managing FTP connections

 

Chapter 5: File Access Using HTTP

Starting the HTTP service

Testing the HTTP service

Specifying the filer response to HTTP requests

 

Adding the map rule

 

Adding the redirect rule

 

Adding the pass rule

 

Adding the fail rule

Configuring MIME Content-Type values

Maintaining HTTP service security

 

Using HTTP options to restrict access

 

Using an HTTP virtual firewall

 

Protecting Web pages

 

Editing the /etc/httpd.access file

 

Creating and editing httpd.passwd and httpd.group files

Using virtual hosting

Displaying HTTP statistics

Viewing HTTP connection information

 

Chapter 6: File Access Using WebDAV

Understanding the WebDAV protocol

 

Chapter 7: File Sharing Between NFS and CIFS

Understanding NFS and CIFS file naming

Understanding file locking between protocols

Understanding read-only bits

Controlling CIFS access to symbolic links

 

Understanding how CIFS clients interact with symbolic links

 

About Map entries

 

About Widelink entries

 

About disabling share boundary checking for symbolic links

 

Redirecting absolute symbolic links

 

Preventing access by CIFS clients to cyclic directory structures

Optimizing NFS directory access for CIFS clients

Preventing CIFS clients from creating uppercase file names

Accessing CIFS files from NFS clients

 

Adding mapping entries to the WAFL credential cache

 

Deleting mapping entries from the WAFL credential cache

 

Setting how long mapping entries are valid

 

Monitoring WAFL credential cache statistics

 

Managing mapping inconsistencies

Installing SecureShare Access

Changing UNIX permissions and DOS attributes from Windows

 

Chapter 8: File Access Using DAFS

Understanding the DAFS protocol

Understanding the DAFS service implementation

Configuring the DAFS service

Starting and stopping the DAFS service

Attaching and detaching network devices

Understanding session authentication

Managing exports for DAFS service

Managing client host access to DAFS exports

Measuring DAFS performance

Displaying DAFS status

Configuring DAFS with options

 

Glossary

 

Index

 
Legal Information