Reconfiguring CIFS for the storage system

What reconfiguring CIFS means  

Reconfiguring CIFS means running the cifs setup program again for CIFS settings. The CIFS configuration settings that you can change by running cifs setup are as follows:

• WINS server addresses
• Whether your storage system is multiprotocol or NTFS-only
• Whether the storage system uses Windows domain authentication, Windows workgroup authentication, or UNIX password authentication
• The file system used by the storage system
• Domain or workgroup to which the storage system belongs
• Storage system name

Prerequisites for reconfiguring CIFS  

The following prerequisites must be true before you can reconfigure CIFS:

• CIFS service must be terminated.
• If you want to change the storage system's domain, the storage system must be able to communicate with the primary domain controller for the domain in which you want to install the storage system. You cannot use the backup domain controller for installing the storage system.
• If you want to change the name of the storage system, you must create a new computer account on the domain controller. (This is not necessary if you are using Windows 2000.)
• Your storage system and the domain controllers in the same domain must be synchronized with the same time source. If the time on the storage system and the time on the domain controllers are not synchronized, the following error message is displayed:

  Clock skew too great

  For detailed steps on how to set up time synchronization services, see the Storage Management Guide.

How the cifs setup program works  

The cifs setup program prompts you for CIFS configuration information and writes the new information to the /etc/cifsconfig.cfg file and /etc/cifssec.cfg file. The following events take place after you start the cifs setup program:

• The /etc/cifsconfig.cfg file is renamed to /etc/cifsconfig.bak.
• The program prompts for the WINS server addresses.
• The program prompts you to configure your storage system to be NTFS-only or multiprotocol.
• If the /etc/cifsconfig.cfg file exists but is corrupted, the program prompts you to create a new computer account for the storage system on the domain controller.
• If the /etc/cifsconfig.cfg file exists and is not corrupted, the program prompts you to delete the existing account. You delete the account if you are installing the storage system into a new domain. The following list describes the result, depending on your response to this prompt:
  • If you delete the existing account, Data ONTAP renames /etc/cifssec.cfg to /etc/cifssec.bak. When the storage system restarts, it uses the new security information specified in the new computer account on the domain controller.
  • If you do not delete the existing account, the storage system restarts in the same domain, using the existing security information.
• The program prompts you to install the storage system in a domain or workgroup and prompts for the domain or workgroup name.
• If all information you entered is valid, the program writes the configuration information to the /etc/cifsconfig.cfg file. Otherwise, it renames the /etc/cifsconfig.bak file to /etc/cifsconfig.cfg. When the storage system restarts, it uses the previous information.

  Note
  If cifs setup fails, the /etc/cifssec.bak file is not renamed to /etc/cifssec.cfg.

Effects of changing an NTFS-only storage system to a multiprotocol storage system  

Although you can change the storage system from NTFS-only to multiprotocol using cifs setup, you can achieve the same effects more easily by simply setting the wafl.default_security_style option to unix.

The following list describes the effects of changing an NTFS-only storage system to a multiprotocol storage system:

• Existing ACLs remain unchanged.
• The security style of all volumes and qtrees remains unchanged.
• When you create a volume, its default security is unix.
• The wafl.default_security_style option is set to unix.

  Note
  Because the security style of the root volume remains ntfs after you change the storage system to multiprotocol, you might be denied access to the root volume when you connect from UNIX as root. You can gain access if the ACL for the root volume allows full control for the Windows user that maps to root. You can also gain access by setting the cifs.nfs_root_ignore_acl option to on.

Effects of changing a multiprotocol storage system to an NTFS-only storage system  

The following list describes the effects of changing a multiprotocol storage system to an NTFS-only storage system:

• If ACLs already exist on the storage system root directory (/etc) and on files in the /etc directory, the ACLs remain unchanged. Otherwise, these ACLs are created such that the BUILTIN\Administrators group has full control; any in the /etc/http directory are assigned "Everyone Read".
• ACLs on other files and directories remain unchanged.
• The security style of all volumes, except read-only volumes, is changed to ntfs.
• If the /etc directory is a qtree, its security style is changed to ntfs.
• Security style for all other qtrees remains unchanged.
• When you create a volume or qtree, its default security style is ntfs.
• The wafl.default_security_style option is set to ntfs.

Effects of changing the storage system's domain  

After you change the storage system's domain, Data ONTAP updates the membership of the BUILTIN\Administrators group to reflect the new domain. This change ensures that the new domain's Administrators group can manage the storage system even if the new domain is not a trusted domain of the old domain.

Reconfiguring CIFS  

To reconfigure a storage system for CIFS, complete the following steps.

cifs terminate

cifs setup

Aborting CIFS reconfiguration  

To terminate the cifs setup program when it is in progress, complete the following step.

Copyright © 1994-2005, Network Appliance, Inc. All rights reserved.
Part No. 210-01086_B0
File: 3cifs5.htm
Last updated: 08-Dec-2005 13:19:35