Access control for CIFS shares

Hi Milorad,

Please consider moving this question as-is (no need to recreate) to the proper forum for maximum visibility.  Questions written to the users' own "Discussions" space don't get the same amount of attention and questions can go unanswered for a long time.

You can do so by selecting "Move" under ACTIONS along the upper-right.  Then search for and select: "DataDomain Support Forum" which would be the most relevant for this question.

I had allready did it and everything is OK. But I still cannot define CIFS share access to domain user. What I havet to put in User/Group field? What is the syntax? I put domain\myaccount, myaccount@domain, domain\\myaccount but I still cannot access the share. When I put * in Client filed or client name or address, it is OK. Problem is only domain user.

Hi Milorad,

It is a little bit tricky with CIFS access.

in User/Group field you need to put "domin\accountname"

Additionally you must add access permission on CIFS folder for the same user\group

How can I add such permission through GUI or CLI? I have allready put domain\accountname in User\Group field.

GUI

Type in windows explorer \\datadomainip and then select related CIFS share folder righ click---security tab...

1. Add * to the user\groups and remove all other entries, do the same for clients
2. Windows explorer \\datadomainIP\cifsshare_folder\

3. Create new folder "test"
4. Set access permissions on test folder
5. Create new share on datadomain wiht path Data\col1\cifsshare_folder\test

6. Add related users and\or groups to User\Groups field (same that you've used in step 4)
    

I cannot access to share when is * in user\group field. It looks like thet User\group field does not work at all.

You have to modify it from Data Domain GUI. I worked a little bit long back (before 6 months). Select the share and search for the option (Look if it's possible from properties) to modify access. There's an option where you can add a group or a single user (You get this at the time of creation of a share, so hope you will find it to modify too). It has to be username@domainname (abc@xyz.com).

Thanks

Rakesh

i use * for both clients and users/groups field ..and control access at the folder level. Works just fine.

Yes, you are right. This is just what I was referring too. As of now I don't have access to that system, so can't visualize.

Thanks

Rakesh

I did it and I can connect to share. to share. But I cannot change user permission on share. I get message Access denied. What i need to put in Organizatio unit field inAuthentication configuration?

ssh into your data domain, run this command and post output

cifs show config