I'm not aware of any reason to avoid links to files. However, current CIFS security does not allow CIFS clients to follow links that leave the share on which they originate, so that it is not possible to follow a link to another volume (unless that link is to another share, which is why it works for homedirs). This is being tracked by BURT 15808.
If you want multiple volumes (or filers) to be accessed from a single point, you can use DFS to achieve this for CIFS clients.
Regards, Andrew Bond Network Appliance UK Consultant Waterview House, 1 Roundwood Avenue, tel +44 (0)20-8756-6722 Stockley Park, mobile +44 (0)7801-383566 Middlesex, UB11 1EJ fax +44 (0)20-8756-6701 http://www.netapp.com Get answers NOW! - NetApp On the Web - http://now.netapp.com
-----Original Message----- From: Hannes Herret [mailto:hh@bacher.at] Sent: 13 September 2001 08:32 To: TORKEL LEIKANGER; toasters@mathworks.com Subject: Re: netapps and links
Symbolic Links on directories are ok; you should prevent links on files.
Relative Symbolic Links could followed by cifs clients.
you have follwing options for the behaviour: options cifs.symlinks.enable on/off options cifs.symlinks.cycleguard off should prevent .,..-troubles
i think you could also try to use absolute sybolic links with /etc/symlink.translations .
cu hannes
TORKEL LEIKANGER wrote:
We want to do someting smart to limit the number of mountpoints for our Netapp users, and to make admin more easy. Question is: "Is there a way to let the filer tell cifs and nfs -boxes
to follow links
pointing between volumes ,in the same way as they do
concerning homedirs? "
On our Netapp 760 running 6.1.1R1 we have 2 big volumes for
projects :
/vol/vol0/proj1 -access=eto-hosts,root=grimstad1:bagri1 /vol/vol1/proj2 -access=eto-hosts,root=grimstad1:bagri1
the same volumes are also cifs shares: PROJ1 /vol/vol0/proj1
Prosjektkataloger (PROJ1)
everyone / Full ControlPROJ2 /vol/vol1/proj2
Prosjektkataloger (PROJ2)
Tried this experiment to limit the users to mount just
/vol/vol0/proj :
Made a /vol/vol/vol0/proj directory, containing links :
# ls -l /fagri2/vol/vol0/proj/
lrwxrwxrwx 1 root other 19 Aug 9 15:59 adm ->
/vol/vol0/proj1/adm
lrwxrwxrwx 1 root other 20 Aug 9 15:59 alex ->
/vol/vol0/proj1/alex
lrwxrwxrwx 1 root other 19 Aug 9 15:59 aps ->
/vol/vol0/proj1/aps
. . .
and a new cifs share:
proj /vol/vol0/proj everyone / Full Control
Mounted /vol/vol0/proj on a unix workstation, and it sees
only links ,
win2000 and NT doesnt even understand what to do with a link....
....so this is probably not the way to do it...
-any good ideas?
Torkel.
--
Hannes Herret IT-Service / Storage phone : +43 (1) 60 126-34 Bacher Systems EDV GmbH fax : +43 (1) 60 126-555 Wienerbergstr. 11B mailto:hh@bacher.at A-1101 Wien, Austria www : http://www.bacher.at/ Europe
cut from sag:
Why you should prevent symbolic links to files?
You should prevent CIFS clients from following symbolic links that point to files because Data ONTAP can update the wrong files. This problem occurs because many CIFS client applications perform operations such as writing to a temporary file, renaming the original file to a backup name, then renaming the temporary file to the original name.
If the original file was targeted directly by a symbolic link, this sequence of operations would result in the file being stored in the directory where the symbolic link was, and the renamed symbolic link pointing at the original file rather than to the updated file.
"Bond, Andrew" wrote:
I'm not aware of any reason to avoid links to files. However, current CIFS security does not allow CIFS clients to follow links that leave the share on which they originate, so that it is not possible to follow a link to another volume (unless that link is to another share, which is why it works for homedirs). This is being tracked by BURT 15808.
If you want multiple volumes (or filers) to be accessed from a single point, you can use DFS to achieve this for CIFS clients.
Regards, Andrew Bond Network Appliance UK Consultant Waterview House, 1 Roundwood Avenue, tel +44 (0)20-8756-6722 Stockley Park, mobile +44 (0)7801-383566 Middlesex, UB11 1EJ fax +44 (0)20-8756-6701 http://www.netapp.com Get answers NOW! - NetApp On the Web - http://now.netapp.com
-
Bond, Andrew -
Hannes Herret