Configuring CIFS using cifs setup

When to use cifs setup

When a valid CIFS license is present, the cifs setup command is automatically invoked during the initial setup of your storage system. The cifs setup command invokes a utility that prompts you for information such as authentication type, lookup services to be used, and so forth.

To learn about using the cifs setup program for initial CIFS configuration, including a list of the information you need when running cifs setup, see the Data ONTAP Software Setup Guide.

In addition to performing initial CIFS configuration, the cifs setup command enables you to perform the following tasks:

Assign or remove WINS servers
Enter the storage system Active Directory site information, if it is not already configured
Join the storage system to a domain or change domains
Automatically generate /etc/passwd and /etc/group files when NIS or LDAP is enabled
Note
If you use NIS for group lookup services, disabling NIS group caching can cause severe degradation in performance. Whenever you enable NIS lookups using the nis.enable option, it is strongly recommended that you also enable caching using the nis.group_update.enable option.

Failure to enable these two options together could lead to timeouts as CIFS clients attempt authentication.

For more information about configuring NIS, see the Network Management Guide.

Configuring WINS servers

The cifs setup utility allows you to make your storage system accessible or inaccessible to systems using WINS, by specifying up to four IPv4 WINS servers, or by disabling WINS. However, running cifs setup requires that you halt CIFS. A non-disruptive way to modify WINS servers is to enter a comma-separated list of WINS servers using the cifs.wins_servers option.

Note
This server list is not additive--if you are adding a third WINS server, you must enter all three IP addresses in a comma-separated list, or your existing two WINS servers are replaced by the server you intended to add.

For more information about the cifs.wins_servers option, see the options(1) man page.

Changing the storage system's domain

If you have already configured your storage system for Windows Domain authentication and you want to move the storage system to a different domain, run the cifs setup utility.

Note
In order to perform this procedure, you need an administrative account with the same permissions required to add any Windows server to the domain.

To change the storage system domain, perform the following steps:

Step	Action
1	If CIFS is currently running, enter the following command: cifs terminate
2	Run the cifs setup utility: cifs setup
3	Accept the default values for all settings, until you see the following question: Do you want to delete the existing filer account information? [no] Enter `yes` to delete your existing account information. Note You must delete your existing account information in order to reach the DNS server entry prompt. After deleting your account information, you are given the opportunity to rename the storage system: `The default name of this filer will be 'filer1'.` `Do you want to modify this name? [no]:`
4	Press Enter to keep the current storage system name. Data ONTAP displays a list of authentication methods: Data ONTAP CIFS services support four styles of user authentication. Choose the one from the list below that best suits your situation. `(1) Active Directory domain authentication (Active Directory domains only)` `(2) Windows NT 4 domain authentication (Windows NT or Active Directory domains)` `(3) Windows Workgroup authentication using the filer's local user accounts` `(4) /etc/passwd and/or NIS/LDAP authentication` `Selection (1-4)? [1]:`
5	Press Enter for Active Directory domain authentication. You are prompted to enter the Active Directory domain for the storage system.
6	Enter the new domain for the storage system. Data ONTAP prompts you for the administrator domain account and password.
7	Enter your administrator account and password.
8	Enter the new fully qualified Windows Domain: Enter the Windows Domain for the storage system []: `newdomain.my_company.com`
9	Continue through the remainder of the `cifs setup` questions, accepting the default values until you exit the `cifs setup` utility. Upon exiting, the `cifs setup` utility starts CIFS.
10	Verify your new DNS server configuration: cifs domaininfo Data ONTAP displays domain information, including the new DNS server setting: NetBios Domain: NEWDOMAIN Windows 2000 Domain Name: newdomain.my_company.com

Changing protocol modes

When you have a valid CIFS license and a valid NFS license, the cifs setup utility allows you to change your protocol setting, either to NTFS only, or to multiprotocol (mixed) mode (allowing both NFS and NTFS client access). Before you change from NTFS-only to multiprotocol mode using cifs setup, see Effects of changing an NTFS-only storage system to a multiprotocol storage system, for an alternate, non-disruptive method to change modes. If you do use cifs setup to change to multiprotocol mode, files are not immediately available to NFS clients.

To make files available to NFS clients after changing to multiprotocol mode using cifs setup, you must also change the root volume qtree security style to unix, then use the chmod command to permit UNIX client access as desired.