Configure CIFS Security

The Configure CIFS Security page enables you to configure the CIFS security for the filer.

The following security elements are included:

Group ID permissions
Search domain list for account mappings
Default security style
Guest account

Of these, the default security style is for the default overall filer security. You can set volume and qtree security separately (under the Volumes option).

Security Styles

Every volume and every qtree has a security style. The filer itself has a default security style that is set up during configuration. Three security styles apply; they are described in the following table.

Security style	Description	Effect
NTFS	Exactly like Windows NT NTFS: files and directories have Windows NT file-level permission settings. Note: To use NTFS security, the filer must be licensed for CIFS. User access is determined as follows: CIFS requests: Windows NT permissions determine user access if Windows NT permissions are set on a file. NFS requests: Windows NT permissions and a mapped CIFS identity determine access. UNIX groups are not used in the mapping from a UNIX identity to a CIFS identity.	If the change is from a mixed qtree, Windows NT permissions determine file access for a file that had Windows NT permissions. Otherwise, UNIX-style permission bits determine file access for files created before the change.
UNIX	Exactly like UNIX: files and directories have UNIX permissions. User access is determined as follows: CIFS requests: Windows users are mapped to a UNIX UID (User ID) and UNIX permissions determine access. In a UNIX qtree, a user cannot set Windows NT permissions. However, a Windows user can change UNIX permissions from Windows using SecureShare Access. NFS requests: only the user's UID, GID, and UNIX-style permission bits of the file or directory determine user access.	The filer disregards any Windows NT permissions established previously.
Mixed	Both NTFS and UNIX security are allowed: a filer or directory can have either Windows NT permissions or UNIX permissions. The default security style of a file is the style most recently used to set permissions on that file. Caution: Changing NTFS permissions on a file recomputes UNIX permissions on that file. Changing UNIX permissions or ownership on a file deletes any NTFS permissions on that file.	None