exit frames
File Access and Protocols Management Guide
Data ONTAP® 7.1
Preface
Chapter 1: Introduction to File Access Management
Chapter 2: File Access Using NFS
Exporting and unexporting file system paths
Providing secure NFS access
Enabling and disabling NFS versions
Using NFSv4
File sharing with PC-NFS clients
Enabling or disabling the pcnfsd daemon
Creating PC-NFS user entries on the storage system
Defining the umask for PC-NFS-created files and directories
Configuring Data ONTAP for WebNFS
Chapter 3: File Access Using CIFS
Configuring a storage system for CIFS
Configuring CIFS using cifs setup
How to specify a storage system's Windows name
Reconfiguring CIFS for the storage system
Managing shares
Sharing directories
Displaying and changing share properties
Deleting a share
Managing ACLs
How share-level access control lists work
Specifying how group IDs work with share-level ACLs
Changing and displaying a share-level ACL
Changing and displaying file-level ACLs
Managing home directories
Understanding home directories on the storage system
How Data ONTAP matches a directory with a user
Setting up user home directories
Specifying home directory paths
Specifying the naming style of home directories
Creating directories in a home directory path
Accessing home directories
Specifying support for wide symbolic links in home directories
How to stop offering home directories
Managing local users and groups
Understanding local user accounts
Creating local groups on the storage system from a Windows system
Applying Group Policy Objects
Enabling GPO support in your environment
Managing GPOs on the storage system
Enabling NTFS security settings with GPOs
Monitoring CIFS activity
Displaying CIFS session information
Timing out idle sessions
Tracking Statistics
CIFS resource limitations
Auditing CIFS events
Understanding CIFS auditing
Configuring Data ONTAP for CIFS auditing
Saving and clearing audit events
Understanding event detail displays
Improving client performance with oplocks
Understanding oplocks
Managing oplocks
Managing authentication and network services
Understanding authentication issues
Selecting domain controllers and LDAP servers
SMB Signing Support
Using null sessions to access storage in non-Kerberos environments
Creating NetBIOS aliases for the storage system
Disabling NetBIOS over TCP
Managing CIFS services
Disabling CIFS service
Disconnecting selected clients
Disabling CIFS for the entire storage system
Specifying which users receive CIFS shutdown messages
Restarting CIFS service
Sending a message to all users on a storage system
Displaying and changing the description of the storage system
How to change a storage system's computer account password
File management through Windows administrative tools
Chapter 4: File Access Using FTP
Understanding FTP service on the storage system
Setting up FTP service on your storage system
Enabling the FTP service on your storage system
Changing the FTP file size
FTP file locking
Configuring an authentication style
Configuring anonymous FTP access
Denying access to the FTP service
Viewing FTP log files and connection statistics
Number of log files per FTP session
Managing FTP connections
Chapter 5: File Access Using HTTP
Starting the HTTP service
Testing the HTTP service
Specifying the storage system response to HTTP requests
Adding the map rule
Adding the redirect rule
Adding the pass rule
Adding the fail rule
Configuring MIME Content-Type values
Maintaining HTTP service security
Using HTTP options to restrict access
Using an HTTP virtual firewall
Protecting Web pages
Editing the /etc/httpd.access file
Creating and editing httpd.passwd and httpd.group files
Using virtual hosting
Displaying HTTP statistics
Viewing HTTP connection information
Chapter 6: File Access Using WebDAV
Understanding the WebDAV protocol
Chapter 7: File Sharing Between NFS and CIFS
Understanding NFS and CIFS file naming
Understanding file locking between protocols
Understanding read-only bits
Managing UNIX credentials for CIFS clients
How CIFS users obtain UNIX credentials
How Data ONTAP maps user names
How to specify entries for the /etc/usermap.cfg file
How Data ONTAP interprets domain names in /etc/usermap.cfg
Examples of usermap.cfg entries
Guidelines and recommendations for mapping user names
Mapping a Windows account to root
Mapping UNIX names to UIDs and GIDs
Creating or disabling the default UNIX user account
Enabling or disabling the Windows guest user account
Improving CIFS performance with caching
Understanding the SID-to-name map cache
Enabling and disabling the SID-to-name map cache
Changing the lifetime of SID-to-name mapping entries
Clearing the SID-to-name map cache
Using LDAP services
Configuring LDAP services
Managing client authentication and authorization
Managing LDAP user-mapping services
Managing Active Directory LDAP servers
Managing LDAP schema
File screening using FPolicy
Understanding FPolicy
Enabling and disabling file screening
Managing file policies
Managing file screening servers
Managing native file blocking
Controlling CIFS access to symbolic links
Understanding how CIFS clients interact with symbolic links
About Map entries
About Widelink entries
About disabling share boundary checking for symbolic links
Redirecting absolute symbolic links
Preventing access by CIFS clients to cyclic directory structures
Optimizing NFS directory access for CIFS clients
Preventing CIFS clients from creating uppercase file names
Accessing CIFS files from NFS clients
Adding mapping entries to the WAFL credential cache
Deleting mapping entries from the WAFL credential cache
Setting how long mapping entries are valid
Monitoring WAFL credential cache statistics
Managing mapping inconsistencies
Appendix A: CIFS Access Limits By System Memory
Appendix B: Event Log and Audit Policy Mapping
Glossary
Index
Legal Information
exit framesexit frames