Library Table of Contents Previous Page (Alt-p) Comments

A   C   D   E   F   G   H   I   K   L   M   N   O   P   Q   R   S   T   U   V   W   

Index

A  Top

access
CIFS access to NFS symbolic links, configuring
CIFS files from NFS clients, configuring
CIFS, to NFS directories, optimizing
filer by CIFS client, providing
filer by null session clients, providing
FTP
anonymous connections, configuring
user connections, configuring
HTTP service
PC-NFS, configuring
restrictions
FTP concurrent connections, limiting
FTP user connections, denying
HTTP, directories accessed through URLs, configuring
Windows user account, mapping to UNIX root
access control list, see ACLs
accounts
user
FTP, default anonymous user name
mapping, for UNIX and Windows
UNIX default user
Windows guest
ACL characteristics using NFSv4
ACLs
adding, from Server Manager
changing
from command line
from Server Manager
share-level
displaying, from command line
file-level, description of
removing entries
from command line
from Windows
aliases, NetBIOS
anonymous FTP access
configuring
enabling
authentication
configuring, for FTP
for PC-NFS
method, effects on file system

C  Top

caches
client-side in Windows 2000 and above
ID-to-name map
clearing (cifs sidcache clear)
Kerberos replay
oplocks, description of
SID-to-name map
changing lifetime of entries in
description of
enabling and disabling
WAFL credential
CIFS
credentials, client UID/GID
default UNIX account, using for guest access
file renaming by clients, preventing
forcing lowercase file naming (options cifs.save_case)
matching users to directories
NFS access to CIFS files, providing
CIFS commands
cifs access
change ACL
display ACL
remove entries from ACL
cifs audit clear (clear internal event log)
cifs audit save (update the event log)
cifs broadcast (send messages to users)
cifs comment (display and change filer description)
cifs nbalias (display list of aliases)
cifs nbalias load (process entries in cifs_nbalias.cfg)
cifs prefdc (manage preferred domain controllers)
cifs resetdc (reestablish connection with a domain controller)
cifs restart (restart CIFS for a filer)
cifs sessions
display information about Windows 2000 clients
display share and file information for users
display summary session information
display user authentication method
display user security information
cifs setup (reconfigure CIFS)
cifs shares
create a share
delete a share
cifs sidcache clear
clear all cache entries
clear cache entries for domain
clear specific SID entry
clear specific user entry
cifs terminate
disable CIFS for a filer
disconnect selected client
fpolicy disable (disable file screening)
fpolicy enable (enable file screening)
fpolicy ext excl add (add excluded extensions)
fpolicy ext excl remove (remove excluded extensions)
fpolicy ext excl set (replace list of excluded extensions)
fpolicy ext excl show (display list of excluded extensions)
fpolicy options default required (require screening for file access)
fpolicy servers show default (display screening server status)
fpolicy servers stop default (disconnect file screening server)
fpolicy show (display file policy information)
options cifs.audit.autosave.file.extension counter (specify automatic counter extensions)
options cifs.audit.autosave.file.extension timestamp (specify automatic timestamp extensions)
options cifs.audit.autosave.file.limit (specify maximum automatic saves)
options cifs.audit.autosave.onsize.enable (save automatically by log size)
options cifs.audit.autosave.onsize.threshold (specify log size threshold)
options cifs.audit.autosave.ontime.interval (specify time interval for automatic saves)
options cifs.audit.enable (enable and disable auditing)
options cifs.audit.file_access_events.enable (enable and disable file access auditing)
options cifs.audit.logon_events.enable (enable and disable auditing of logon and logoff events)
options cifs.audit.logsize (specify maximum size of internal event log)
options cifs.audit.saveas (save as different event log)
options cifs.home_dir
disable home directory shares
options cifs.home_dir_namestyle (specify naming style of home directories)
options cifs.idle_timeout (specify idle session timeout)
options cifs.netbios_aliases (specify NetBIOS aliases for filer)
options cifs.netbios_over_tcp.enable (enable or disable NetBIOS over TCP)
options cifs.nfs_root_ignore_acl (allow access to root volume with NTFS security)
options cifs.oplocks.enable (enable system-wide oplock)
options cifs.oplocks.opendelta (change delay time for sending breaks)
options cifs.perm_check_ro_del_ok (allow deletion of files with read-only bit set)
options cifs.perm_check_user_gid (set GID to grant access)
options cifs.save_case (force lowercase file names)
options cifs.shutdown_msg_level (specify which users receive shutdown messages)
options cifs.sidcache.enable (enable and disable SID-to-name map cache)
options cifs.sidcache.lifetime (change lifetime of mapping entries)
options cifs.symlinks.cycleguard (disable access to cyclic directory structures)
options cifs.symlinks.enable (enable CIFS clients to follow symbolic links)
options cifs.trace_login (trace CIFS logins by NFS clients)
options fpolicy.enable (turn file policies on or off)
options wafl.default_unix_user (create generic account)
CIFS files, accessing, from NFS
CIFS protocol
accessing others' home directories
accessing root volume with NTFS security (options cifs.nfs_root_ignore_acl)
ACLs
adding with Windows administrative tools
file-level
share-level
auditing
clearing audit log
description of
external log file, /etc/log/adtlog.evt
internal log file, /etc/log/cifsaudit.alf
list of events
logon and logoff events, enabling and disabling (options cifs.audit.logon_events.enable)
prerequisites for
changing from command line (cifs access)
changing share-level ACL
CIFS logins by NFS clients, tracing (options cifs.trace_login)
cifs setup, reconfiguring
cifsconfig.cfg file
clearing event audit log (cifs audit clear)
cyclic directory structures, disabling access to (options cifs.symlinks.cycleguard)
default setting of GID
disabling CIFS
for selected clients
for the filer (cifs terminate)
disconnecting CIFS clients
using command line (cifs terminate)
with Windows administrative tools
displaying
ACLs, from command line (cifs access)
file policy information (fpolicy show)
session information
share and file information for users (cifs sessions)
summary session (cifs sessions)
user security information (cifs sessions)
event audit log, viewing (Event Viewer)
event detail displays
description of
from UNIX
from Windows
lost record
unsuccessful file access
event log
automatic counter extensions
automatic file naming
automatic save interval, specifying (options cifs.audit.autosave.ontime.interval)
automatic saves, specifying maximum (options cifs.audit.autosave.limit)
automatic saving of (options cifs.audit.autosave.onsize.enable)
automatic timestamp extensions
clearing the internal log (cifs audit clear)
counter extensions, specifying (options cifs.audit.autosave.file.extension counter)
how event logs are updated
internal log, specifying maximum size of (options cifs.audit.logsize)
log size threshold, specifying (options cifs.audit.autosave.onsize.threshold)
saving as a separate file (options cifs.audit.saveas)
size and format of
timestamp extensions, specifying (options cifs.audit.autosave.file.extension timestamp)
updating (cifs audit save)
valid size thresholds
valid time intervals
file access auditing, enabling and disabling (options cifs.audit.file_access_events.enable)
file policies, enabling and disabling (options fpolicy.enable)
file screening
disabling (fpolicy disable)
enabling (fpolicy enable)
excluded extensions list, displaying (fpolicy ext excl show)
excluded extensions, adding (fpolicy ext excl add)
file policy, creating (fpolicy create)
file policy, disabling (fpolicy disable)
file policy, enabling (fpolicy enable)
included and excluded extensions list, replacing (fpolicy ext exc set, fpolicy ext inc set)
included and excluded extensions, removing (fpolicy ext exc remove, fpolicy ext inc remove)
included extensions, adding (fpolicy ext inc add)
policy, resetting (fpolicy ext exc reset, fpolicy ext inc reset)
screening for file access, requiring (fpolicy options default required)
screening server status, displaying (fpolicy servers show default)
screening servers, adding secondaries (fpolicy options secondary_servers)
server, disabling (fpolicy servers stop default)
filer description, displaying and changing
home directories
accessing
creating directories in
description of
name style, specifying (options cifs.home_dir_namestyle)
paths, specifying (options cifs.home_dir)
home shares
ceasing to offer (options cifs.home_dir)
syntax of, using UNC name
idle sessions
description of
timeout, specifying (options cifs.idle_timeout)
local groups
creating
definition of
deleting
removing members from
SnapMirror advisory
managing with Windows administrative tools
mapping inconsistencies with WAFL credential cache
mapping Windows user account for UNIX root access
multiprotocol to NTFS-only, effects of
NetBIOS aliases, creating (options cifs.netbios_aliases)
NetBIOS over TCP
description of
disabling (options cifs.netbios_over_tcp.enable)
NTFS-only to multiprotocol, effects of
oplocks
changing delay time for sending breaks (options cifs.oplocks.opendelta)
delay time for sending breaks, description of
description of
filer and client oplock settings
managing
setting, for each qtree (qtree oplocks)
system-wide, enabling (options cifs.oplocks.enable)
optimizing client access to NFS directory
passwd file, creating
quotas and generic user account, description of
removing ACL entries
from command line (cifs access)
from Windows
restarting CIFS (cifs restart)
sending messages
from command line (cifs broadcast)
Server Manager, limitations of
shared directories, description of
share-level ACLs
reason for changing
using GIDs with
shares
creating, from command line (cifs shares)
deleting, from command line (cifs shares)
deleting, from Windows
differences between home and other shares
forcegroup
GID, specifying effect on file access, (options cifs.perm_check_user_gid)
group membership
number of users, specifying
properties, displaying and changing, from Server Manager
shutdown messages, specifying recipients of
SID-to-name map cache
clearing (cifs sidcache clear)
description of
enabling and disabling (options cifs.sidcache.enable)
lifetime of entries, specifying (options cifs.sidcache.lifetime)
SMB signing
starting CIFS at reboot, preventing
symbolic links
as home directory names
how CIFS clients follow
options for accessing
UNIX credentials, providing to specific users
UNIX guest accounts for CIFS users, creating (options wafl.default_unix_user)
UNIX user accounts for CIFS users, creating
User Manager, limitations of
WAFL mapping inconsistencies
Windows guest accounts
creating and deleting
cifs setup
configuring WINS servers
description of
commands, for CIFS See CIFS commands
commands, for HTTP See HTTP commands
configuration files
cifs_nbalias.cfg
ftpusers
group
home_dir
httpd.access
httpd.group
httpd.mimetypes
httpd.passwd
httpd.translations
passwd file
symlink.translations
usermap.cfg file
connections, limiting for FTP
credentials, filer access using UNIX
cyclic directory structures, description of

D  Top

Data ONTAP
converting to Unicode-formatted directories
creating Unicode-formatted directories (options wafl.create_ucode)
directory structures
cyclic
NFS and CIFS
file locking
file name creation
how usermap.cfg file is used
mapping Windows names and UNIX names in
matching users to directories using CIFS
obtaining GIDs in CIFS
obtaining UID in CIFS
read-only bit, description of
shared file permissions, description of
using NTFS to determine file access
using UNIX credentials for file access
default UNIX user account
creating (options wafl.default_unix_user)
definition of
prerequisites for
delegating files to clients in NFSv4
directory structures
converting to Unicode-formatted directories
creating Unicode-formatted directories
cyclic directories
NFS and CIFS
domain controllers
disconnecting and forcing discovery of
discovering
preferred controllers
adding
deleting
listing
selecting
specifying preferred controllers
troubleshooting filer connection to

E  Top

/etc/cifs_nbalias.cfg file, creating entries in
/etc/ftpusers file
about
editing
format of
/etc/group file, finding information about
/etc/home_dir file, specifying directories in
/etc/httpd.access file
contents of
editing
format of
options in
/etc/httpd.group file
contents of
creating
description of
editing
/etc/httpd.hostprefixes file
/etc/httpd.mimetypes file
/etc/httpd.passwd file
contents of
creating and editing
description of
/etc/httpd.translations file
description of
fail rule, adding
map rule, adding
pass rule, adding
redirect rule, adding
/etc/log/adtlog.evt file (external audit file)
/etc/log/cifsaudit.alf file (internal audit file)
/etc/log/httpd.log file
changing file format of
information in
/etc/passwd file
contents of
format of
use of by pcnfsd
when created
/etc/shadow file, use of by pcnfsd
/etc/symlink.translations file (symbolic link translations)
description of
listing entries in
/etc/usermap.cfg file
contents of
format of
increasing security in
mapping names in
use of, by Data ONTAP

F  Top

fail rule, for HTTP
FAT (File Allocation Table) file system See file system
file access
effects of GID in
mapping entries to WAFL credential cache
NFS access of CIFS files, description of
permissions for NFS and CIFS clients
using NTFS to determine
file access, determining factors
file delegation features, NFSv4
file extensions, mapping, for HTTP MIME files
file locking
description of
NFS operations affected by
file names
conventions, in multiprotocol environment
creating
lowercase option (options cifs.save_case)
preventing renaming of
file permissions, umask for PC-NFS clients
file screening
description
enabling
file policy
creating
deleting
disabling
displaying
enabling
exclude list for, adding to
include and exclude lists, replacing all entries in
include list for, adding to
included or excluded files, displaying
native file blocking
requiring for all files
screening servers
disabling
secondary screening servers, adding
screening servers, displaying status of
file screening server
File System security GPO
file system, determining type for a given resource
File Transfer Protocol (FTP) See FTP service
filers
CIFS description
managing CIFS using Windows administrative tools
restarting CIFS
files, deleting when read-only bit is set
FPolicy See file screening
FTP commands
ftp stat (provide FTP connection statistics)
options ftpd.anonymous.enable (enable or disable anonymous FTP access)
options ftpd.anonymous.home_dir (specify home directory for anonymous user)
options ftpd.anonymous.name (specify name for anonymous login)
options ftpd.auth_style (specify authentication style)
options ftpd.enable (enable the FTP daemon)
options ftpd.idle_timeout (specify the timeout for idle connections)
options ftpd.max_connections (specify maximum concurrent FTP connections)
options ftpd.tcp_window_size (specify TCP window size)
FTP service
anonymous access
configuring
options for
authentication styles
Mixed, configuring
Mixed, description of
NTLM, configuring
NTLM, description of
overview
UNIX, configuring
UNIX, description of
configuring
denying users access to
enabling
ftpd daemon
ftpusers file, format of and editing
log files
types of
viewing
ftp.cmd file, description of
ftp.xfer file, description of

G  Top

GIDs (group IDs), obtaining
Group Policy Object (GPO)
about
File System Security
groups
how CIFS determines membership in
how PC-NFS determines membership in
HTTP service
NIS lookups
PC-NFS lookups
guest account
FTP anonymous users
UNIX default user
Windows (default) user, pcuser
guidelines, for mapping Windows to UNIX user names

H  Top

home directories
accessing others' home directories
CIFS
accessing
creating
description of
matching to users
naming style, specifying
wide symbolic links in
FTP, anonymous users
home directory paths, CIFS
specifying, in the /etc/home_dir file
home shares, ceasing to offer(options cifs.home_dir)
HTTP commands
fail (add fail rule to translation file)
httpstat (display statistics)
httpstat (reset statistics)
map (add map to translation file)
options httpd.access (restrict access to HTTP services)
options httpd.admin.access (restrict access to storage system administration via HTTP)
pass (add pass rule to translation file)
redirect (add redirect rule to translation file)
HTTP service
See also "/etc/httpd" entries under E
/etc/httpd.hostprefixes
license requirements
log file
description of
viewing
MIME Content-Type values, mapping
rules
fail, adding
map, adding
pass, adding
redirect, adding
URL translation, storage system processing of
security
authentication methods
basic authentication
levels of
NTLM authentication
restricting access, options for (ifconfig)
user password
virtual firewall, designating restricted subnets
Web pages, protecting
setting up
starting the HTTP service
statistics
description of
displaying (httpstat)
resetting (httpstat)
testing the HTTP service
virtual firewall, configuring
virtual hosting
description of
mapping virtual host addresses (ifconfig)
setting up

I  Top

ID
obtaining a UID in CIFS
obtaining GIDs in CIFS
idle sessions
CIFS
description of
timeout value, specifying (options cifs.idle_timeout)

K  Top

Kerberos
CIFS, configuring for
NFS, configuring for
replay cache
Kerberos commands
options kerberos.replay_cache.enable
keytab generation, NFS

L  Top

LDAP
authorizing UNIX client access to NTFS or mixed file systems
authorizing Windows client access to UNIX files
editing /etc/nsswitch.conf file
enabling and disabling (options ldap.enable)
servers supported
signing
specify base distinguished name (options ldap.base)
specify preferred servers (options ldap.servers.preferred)
specify servers (options ldap.servers)
specifying admin password (options ldap.passwd)
specifying admin user name (options ldap.name)
specifying LDAP port (options ldap.port)
support of Windows client authentication
LDAP commands
options ldap.base (specifies base distinguished name)
options ldap.enable (enables and disables LDAP)
options ldap.name (specifies admin user name)
options ldap.passwd (specifies admin password)
options ldap.port (specifies LDAP port)
options ldap.servers (specifies servers)
options ldap.servers.preferred (specifies preferred servers)
licenses, HTTP service
local user accounts
managing
reasons for specifying
log files
adtlog.evt
cifsaudit.alf
ftp.cmd
ftp.xfer
httpd.log

M  Top

man in the middle attacks, preventing
Map entries (symbolic link redirects for CIFS clients)
creating
description
listing
requirements for
use of
map rule for HTTP
mapping
inconsistencies with WAFL credential cache
SID-to-name cache
mapping Windows and UNIX user names
Data ONTAP methods for
guidelines for
MIME files for HTTP, mapping file suffixes (Content-Type values)
multiprotocol environment, file naming conventions
multiprotocol filer to NTFS-only filer, effects of

N  Top

names
creating, for files in CIFS and multiprotocol environments
guidelines for mapping for Windows and UNIX
mapping
credentials for Windows and UNIX users
mapping for Windows and UNIX with usermap.cfg file
native file blocking
description
NetBIOS aliases
cifs_nbalias.cfg file, processing entries in (cifs nabalias load)
creating in /etc/cifs_nbalias.cfg file
displaying list of (cifs nbalias)
/etc/cifs_nbalias.cfg file
NetBIOS over TCP
description of
disabling
network commands
ifconfig (map virtual host addresses)
ifconfig (restrict HTTP access over subnet)
NFS commands
option nfs.v4.id_domain (specify user ID domain)
options nfs.mountd.trace (enable and disables tracing of denied NFS mount requests)
options nfs.vN.enable (enable and disables NFS versions)
options pcnfsd (enable and disables pcnfsd)
options pcnfsd.umask (define umask)
NFS delegation of files (NFSv4)
NFS keytab generation
NFS protocol
accessing CIFS files, description of
CIFS access to NFS directory, optimizing
enabling and disabling versions (options nfs.vN.enable)
file renaming by CIFS clients, prevention of
mapping inconsistencies with WAFL credential cache
mount requests
tracing denied requests
PC-NFS
clients, authentication of
PC-NFS, creating user entries with
pcnfsd daemon
determining group membership
enabling and disabling (options pcnfsd)
secure NFS access
symbolic links (absolute), redirecting for CIFS clients
symbolic links, using with CIFS
umask
definition of (options pcnfsd.umask)
PC-NFS-created files
version 4 (NFSv4)
limitations
pseudo-fs effect on mount points
support
user ID domain, specifying (option nfs.v4.id_domain)
WAFL mapping inconsistencies
WebNFS, configuring
NFSv4
ACL characteristics
NIS
configuring for CIFS
NTFS
converting NTFS filers to multiprotocol filers (wafl.default_security_style option)
using to determine file access
NTLM, implementation for FTP
description of
enabling
null sessions, using to access filer data

O  Top

oplocks
changing delay time for sending breaks (options cifs.oplocks.opendelta)
delay time for sending breaks, description
description of
filer and client settings
managing
setting for each qtree (qtree oplocks)
system-wide (options cifs.oplocks.enable)
when to use

P  Top

pass rule for HTTP
passive replay attacks, preventing
PC-NFS
authentication
clients, file permissions for
creating user entries with
group lookups
umask
defining (options pcnfsd.umask)
working with files
pcnfsd daemon
authentication, description of
determining group membership
enabling and disabling (options pcnfsd)
pcuser, UNIX default user for CIFS guest access
permissions
shared files permissions
umask for PC-NFS clients
preferred domain controller (prefdc), deleting
preferred domain controller (prefdc), listing
preferred domain controller (prefdc), specifying
protocol support

Q  Top

qtrees
effects of qtree style on file system
setting oplocks for each (qtree oplocks)

R  Top

read-only bit
deleting files when set (options cifs.perm_check_ro_del_ok)
description of
redirect rule for HTTP
replay attacks, preventing
replay cache, Kerberos
resources
definition of
root
allow access to root volume (CIFS with NTFS security)
mapping a Windows user account for UNIX root access
root directory, for WebNFS lookup
rules for
HTTP translations file
URL translation

S  Top

screening policy See file screening
security
Group Policy Object (GPO) settings
LDAP signing
levels for HTTP
restricting HTTP access
SMB signing
security styles, Kerberos
client support
implementation
setting up for UNIX
Server Manager
ACL
adding entries to
displaying and changing
removing entries from
disconnecting clients
limitations of
sending messages
shares
displaying properties of
Server Message Block. See SMB
session information (CIFS), displaying
shared directories, description of
shared files, permissions for
shared resources
with NFS and PC-NFS clients
with WebNFS clients
share-level ACLs
changing
using GIDs
shares
creating
from command line (cifs shares)
deleting
differences between home and other shares
displaying and changing properties
forcegroup
group membership
Group Policy Object (GPO) security settings
number of users, specifying
share boundary checking for symbolic links
disabling
specifying
umask value, description
virus scanning, specifying
wide symbolic links, enabling
SID-to-name map cache
changing lifetime of entries
clearing (cifs sidcache clear)
description of
enabling and disabling
signing
LDAP
SMB
SMB signing
SNMP, viewing FTP statistics for
statistics
FTP (ftp stat)
HTTP (httpstat command)
NFS file delegation statistics (nfsstat command)
WAFL credential cache
symbolic links
CIFS home directories, using symbolic links for
description of
disabling share boundary checking for
enabling CIFS clients to follow (options cifs.symlinks.enable)
preventing links to files
redirecting
for CIFS clients
methods of
using Map entries
using Widelink entries
wide symbolic links, enabling for a share

T  Top

timeout value, specifying for FTP
translations
for HTTP directories
of symbolic links
rules for URL

U  Top

UID, obtaining
umask value, description
umask, defining for PC-NFS
UNC name, syntax for specifying home share
Unicode directories, converting to
Unicode format, directory structure
UNIX
credentials, description of
user name, special characters in
using UNIX credentials for filer access
URLs
redirecting and restricting access to directories
translation rules
user accounts
FTP anonymous user
PC-NFS creating entries for
UNIX default user
Windows guest
user authentication method, displaying
user ID (UID), obtaining
User Manager
creating a local group
deleting group
limitations of
removing members from group
user names
mapping Windows and UNIX
matching to directories using CIFS
usermap.cfg, description of

V  Top

virtual firewall for HTTP
virtual hosting for HTTP
virus scanning, specifying for a share

W  Top

WAFL credential cache
adding entries to (wcc)
deleting entries in (wcc)
description of
displaying cache statistics (wcc)
mapping inconsistencies
description of
with a CIFS name
with a UNIX name
monitoring
setting length of validity (options wafl.wcc_minutes_valid)
WAFL, setting security style option (wafl.default_security_style option)
Web page protection
WebDAV (Web-based Distributed Authoring and Versioning), described
WebNFS
configuring
root directory
wide symbolic links
enabling for a share
in home directories
Widelink entries
creating
description
how to list
how used
limitations
requirements
window size, specifying for FTP TCP
Windows and UNIX user names (usermap.cfg file)
mapping by Data ONTAP
Windows and UNIX user names, guidelines for (custom) mapping
Windows domain names, Data ONTAP interpretation of
Windows NT domain names, Data ONTAP interpretation of
Windows user names
converting from Windows 2000 format to pre-Windows 2000 format
WINS server addresses, changing
WINS servers, configuring

A   C   D   E   F   G   H   I   K   L   M   N   O   P   Q   R   S   T   U   V   W   

Library Table of Contents Previous Page (Alt-p) Comments

Copyright © 1994-2005, Network Appliance, Inc. All rights reserved.
Part No. 210-01086_B0
File: bookix.htm
Last updated: 08-Dec-2005 13:19:59