Hi,
Data ONTAP Release 8.1.2P1 7-Mode
We received a request to provide FTP access to a filer. Here is what they want:
- they have 4 CIFS shares, each is in a separate vol/qtree (prod, test, qa, whatever) - from a AIX system, they want to FTP to the filer, access the each of the vol/qtree shares, and download files - they want to do this via Active Directory ID's and security - I believe they want to do this via 4 separate ID's - one per share, but I think using just one may be ok
I've been reading about FTP on OnTap. I think I see how to enable FTP with AD ID's (NTLM style). I can then have ID's all access a single dir, or have each ID access it's own home dir. I don't see any way to specify a particular vol/qtree per AD ID.
For Unix style access I could create separate ID's in the /etc/passwd file with specific vol/qtree home dirs, which I would make their CIFS vol/qtrees. But if I do this, I can't fine how the UNIX id's would access the CIFS file - it's two different security models.
I'd like them to just mouth the CIFS shares to AIX, but they can't get it to work.
I could use some advice!
Rick
----------------------------------------- The information contained in this message is intended only for the personal and confidential use of the recipient(s) named above. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately, and delete the original message.
You should try again getting an NFS mount working. That's the solution you really need, and Netapp's FTP stack is a poor workaround.
NFS/CIFS shares governed by AD accounts is a solvable problem. The way mine works, I set the security style for the volume to NTFS, then I add the name of the unix user to the filer's /etc/passwd and their gid to /etc/group. I could do name mapping, but we don't. The name in unix needs to be an exact string match to the domain name. From there, I just ensure that the user's read permissions in Windows extend all the way up to / from wherever the share is.
On Sun, Oct 4, 2015 at 5:09 PM, Rhodes, Richard L. < rrhodes@firstenergycorp.com> wrote:
Hi,
Data ONTAP Release 8.1.2P1 7-Mode
We received a request to provide FTP access to a filer.
Here is what they want:
- they have 4 CIFS shares, each is in a separate vol/qtree (prod, test,
qa, whatever)
- from a AIX system, they want to FTP to the filer, access the each of the
vol/qtree shares, and download files
they want to do this via Active Directory ID’s and security
I believe they want to do this via 4 separate ID’s - one per share, but
I think using just one may be ok
I’ve been reading about FTP on OnTap.
I think I see how to enable FTP with AD ID’s (NTLM style). I can then have ID’s all access a single dir, or have each ID access it’s own home dir. I don’t see any way to specify a particular vol/qtree per AD ID.
For Unix style access I could create separate ID’s in the /etc/passwd file with specific vol/qtree home dirs, which I would make their CIFS vol/qtrees. But if I do this, I can’t fine how the UNIX id’s would access the CIFS file - it’s two different security models.
I’d like them to just mouth the CIFS shares to AIX, but they can’t get it to work.
I could use some advice!
Rick
- The information contained in this message is intended only for the
personal and confidential use of the recipient(s) named above. If the reader of this message is not the intended recipient or an agent responsible for delivering it to the intended recipient, you are hereby notified that you have received this document in error and that any review, dissemination, distribution, or copying of this message is strictly prohibited. If you have received this communication in error, please notify us immediately, and delete the original message. *
Toasters mailing list Toasters@teaparty.net http://www.teaparty.net/mailman/listinfo/toasters
-
Basil -
Rhodes, Richard L.