I called Netapp support and this are the recommendations. It did fix the
problem. Thanks for all the input.
1. Remove the machine account for the Filer from the WindowsNT domain
controller.
2. On the Filer, type:
filer> cifs terminate
3. Issue these commands:
filer> mv /etc/lclgroups.cfg /etc/lclgroups.old
filer> mv /etc/filersid.cfg /etc/filersid.old
filer> mv /etc/cifsconfig.cfg /etc/cifsconfig.old
4. Run cifs setup, and enter your apropriate information
5. Verify that you can join the WinNT domain, and that your users can now
access and map the shares (if they cannot, please let me know, and please
tell me what error messages you get)
6. If you dont want to re-create your shares manually from the Domain
controller, Computer Manager, you can:
cifs terminate
mv /etc/cifsconfig.old /etc/cifsconfig.cfg
cifs restart
Cheers,
Marcus
-----Original Message-----
From: Reinoud Reynders [mailto:reinoud.reynders@uz.kuleuven.ac.be]
Sent: Thursday, January 02, 2003 4:18 PM
To: Bui, Marcus; 'Fox, Adam'; toasters(a)mathworks.com
Subject: Re: accessing local group
An other possibility is that you run again 'cifs setup'. This do the job.
You are than of course some minutes without CIFS.
Best regards,
Reinoud
UZLEUVEN
Belgium
----- Original Message -----
From: "Bui, Marcus" <Marcus_Bui(a)AIMFUNDS.COM>
To: "'Fox, Adam'" <Adam.Fox(a)netapp.com>; <toasters(a)mathworks.com>
Sent: Thursday, January 02, 2003 10:25 PM
Subject: RE: accessing local group
> I can mapped to the ETC folder, but unable to view/change the contents.
Get
> 'access denied'.
>
> -----Original Message-----
> From: Fox, Adam [mailto:Adam.Fox@netapp.com]
> Sent: Thursday, January 02, 2003 2:49 PM
> To: 'Bui, Marcus'
> Subject: RE: accessing local group
>
>
> The key is to be in the Local Adminstrators group. When you
> changed domains, perhaps this wasn't updated. Try taking a peek
> at the filer etc\lclgroups.cfg on the filer and look at the SIDs
> under the Administrators group. You can use the cifs lookup command
> to decode the SIDs. If the Domain Admins Group isn't there, fix it
> by changing the SIDs. BE VERY CAREFUL and have your old copy of this
> file available either by copying it or having a known good copy in a
> snapshot because you want to be careful and be able to fall back.
> In order to make CIFS see changes in this file, you must terminate and
> restart cifs (at least it's quicker than a reboot).
>
> Hope this helps. You may want to consider calling NTAP to walk you
> through it, but that's how I would approach it.
>
> -- Adam Fox
> NetApp Professional Services, NC
> adamfox(a)netapp.com
>
>
>
> -----Original Message-----
> From: Bui, Marcus [mailto:Marcus_Bui@AIMFUNDS.COM]
> Sent: Thursday, January 02, 2003 2:39 PM
> To: 'toasters(a)mathworks.com'
> Subject: accessing local group
>
>
> All,
>
> I have a test F85 (ONTAP 6.2.2) in an NT4 Domain but I am unable to access
> the local group on the filer. The box was previously in W2K AD but was
> moved to an NT4 domain. The filer is listed in the domain. I logged as
> Domain Admin but still get 'access denied' when trying to access the
filer's
> local group. Did 'cifs testdc' and it is authenticating to the correct
DC.
>
> Any suggestions is appreciated.
>
> thanks,
>
> Marcus Bui
>
>