By "spontaneously," I mean that /etc/log/auditlog and our homegrown API-based tool confirm that there were no filer configuration changes made.
The FlexVol and qtrees are all ntfs mode. The "hidden qtree" behavior has been seen on SMB connections from Windows 7, w2k3 and OS X (at least 10.8, probably other versions). We also share this FlexVol to NFS clients, although usage is light. NFS clients can see and access all qtrees as usual.
There were a couple of initial reports from OS X users that they could not connect to the share at all, although I could not confirm or replicate this myself.
Share permissions are basic:
Name Mount Point Description
---- ----------- -----------
General /vol/general General public share
everyone / Change
BUILTIN\Administrators / Full Control
DAYJOB\Domain Admins / Full Control
If we use "Previous versions" on Windows to access the 12p snapshot yesterday, the qtrees are all visible. Using "cacls" or the "Security" tab to view permissions on both hidden and visible directories shows nothing unexpected - and no changes in permissions relative to the 12p snapshot.
A "cifs terminate"/"cifs restart" requested by NetApp support did not resolve the issue; they continue to work on it, but assert that they have never seen anything like it before.
I'd be grateful for any ideas anyone here might have.
Thanks,
Andy