If you have only CIFS clients in your environment and your storage system was set up as a multiprotocol storage system, you must have at least one Windows account that has root privilege for accessing files on the storage system. Otherwise, you cannot manage the storage system because you do not have access to files with UNIX-style security, which might include some configuration files in the /etc directory.
If your storage system was set up as NTFS-only, however, the /etc directory has a file-level ACL that enables the Administrators group to access the Data ONTAP configuration files.
To map at least one Windows account to root, complete the following steps.
| 1 | ||
|
You want to map all accounts in the Administrators group to root |
Complete only Step 2. | |
| 2 |
Verify that the wafl.nt_admin_priv_map_to_root option is set to On. ResultAll accounts in the Administrators group are considered root, even if you do not have an /etc/usermap.cfg entry mapping the accounts to root. If you create a file using an account that belongs to the Administrators group, the file is owned by root when you view the file from a UNIX client. |
|
| 3 |
For each account that maps to root, add an /etc/usermap.cfg entry. Note |
|
| 4 |
Disable the wafl.nt_admin_priv_map_to_root option with the following command: options wafl.nt_admin_priv_map_to_root off ResultAccounts in the Administrators group no longer map to root. You can use only those accounts that you map to root in the /etc/usermap.cfg file to access files with UNIX-style security. Each account in the Administrators group has a separate UNIX ID. |
|
Copyright © 1994-2005, Network Appliance, Inc. All rights
reserved.
Part No. 210-01086_B0
File: 7multi12.htm
Last updated: 08-Dec-2005 13:19:49