I recently reinitialized one of our filers and I thought I had everything configured until I started testing CIFS shares. When I create a folder and try to change the permissions, the security tab is not available in windows. The other filer in the cluster allows me to change the permissions on individual folders. I thought I had gone through all the cifs options but I can't seem to change that behavior. Any ideas?
Brent Ellis Boston University interi@bu.edu
Sorry for the list clutter I figured it out. I had forgotten to set the QTree for the volume to NTFS
Brent Ellis Boston University interi@bu.edu
On Sep 1, 2006, at 10:59 AM, Brent Ellis wrote:
I recently reinitialized one of our filers and I thought I had everything configured until I started testing CIFS shares. When I create a folder and try to change the permissions, the security tab is not available in windows. The other filer in the cluster allows me to change the permissions on individual folders. I thought I had gone through all the cifs options but I can't seem to change that behavior. Any ideas?
Brent Ellis Boston University interi@bu.edu
what does qtree status show? Is the security style set to ntfs? Most likely it would be unix. change it to ntfs using qtree security <path> ntfs -G
On 9/1/06, Brent Ellis interi@bu.edu wrote:
I recently reinitialized one of our filers and I thought I had everything configured until I started testing CIFS shares. When I create a folder and try to change the permissions, the security tab is not available in windows. The other filer in the cluster allows me to change the permissions on individual folders. I thought I had gone through all the cifs options but I can't seem to change that behavior. Any ideas?
Brent Ellis Boston University interi@bu.edu
Try cifs testdc and cifs resetdc to verify that they are indeed communicating with the domain controllers and authenticating properly. Ran into a similar issue with one of our Development network filers. Turned out time synchronization wasn't working in that domain at all and the filers time had drifted to more than 5 minutes from the DC's. If Kerberos sees more than a 5 min time difference, it will not allow you to authenticate against AD.
________________________________
From: owner-toasters@mathworks.com on behalf of Brent Ellis Sent: Fri 9/1/2006 10:59 AM To: toasters@mathworks.com Subject: Active Directory security on CIFS volumes
I recently reinitialized one of our filers and I thought I had everything configured until I started testing CIFS shares. When I create a folder and try to change the permissions, the security tab is not available in windows. The other filer in the cluster allows me to change the permissions on individual folders. I thought I had gone through all the cifs options but I can't seem to change that behavior. Any ideas?
Brent Ellis Boston University interi@bu.edu
Verify that the qtree security style is set to "ntfs" using the "qtree security" command. If the share is not contained within a qtree, then you'll need to verify the security setting on the volume with the same "qtree security" command.
Just as a disclaimer: There are potentially undesireable ramifications of changing the security style for a volume/qtree in a mixed protocol environment (NFS + CIFS). If you have NFS going to these shares, then there's more work to be done than just flipping security styles.
Jeff Mery - MCSE, MCP National Instruments
------------------------------------------------------------------------- "Allow me to extol the virtues of the Net Fairy, and of all the fantastic dorks that make the nice packets go from here to there. Amen." TB - Penny Arcade -------------------------------------------------------------------------
Brent Ellis interi@bu.edu Sent by: owner-toasters@mathworks.com 09/01/2006 09:59 AM
To toasters@mathworks.com cc
Subject Active Directory security on CIFS volumes
I recently reinitialized one of our filers and I thought I had everything configured until I started testing CIFS shares. When I create a folder and try to change the permissions, the security tab is not available in windows. The other filer in the cluster allows me to change the permissions on individual folders. I thought I had gone through all the cifs options but I can't seem to change that behavior. Any ideas?
Brent Ellis Boston University interi@bu.edu
-
Brent Ellis -
Holland, William L -
Jeff Mery -
Sto Rage©