Start a Conversation

Solved!

Go to Solution

Closed

1 Rookie

 • 

45 Posts

2137

May 1st, 2023 09:00

Isilon: disable user access for shares/exports

Hi,

I have some exports & shares which I am planning to migrate to another Isilon using SyncIQ. During cutover, what is the best way to disable any user IO access for source exports/shares ? I know there is option to disable protocol for entire Isilon but in my case, I just want to disable user access for selective exports/shares. Pls suggest.

Thanks

 

1 Rookie

 • 

20.4K Posts

May 2nd, 2023 05:00

You are going to be looking for open files on every single node using "isi smb openfiles list" and then closing.  Are you going to be looking for sessions using "isi smb sessions" and deleting them?  Ultimately it's your call but I think you are creating more work for yourself then needed.  Schedule downtime with your users, tell them to save their work and then delete the share.  Do your SyncIQ work .etc and you are done.  You can easily document the share settings and put them back after the fact.

1 Rookie

 • 

45 Posts

May 1st, 2023 09:00

Thanks but anyother better way rather removing shares/exports ? Wanted to keep source config alive just incase I have to roll back the change.

Thanks

1 Rookie

 • 

20.4K Posts

May 1st, 2023 09:00

I would remove the shares, and perform the final sync. 

1 Rookie

 • 

20.4K Posts

May 1st, 2023 10:00

Deny access using host-acl

 

isi smb shares modify   --host-acl=deny:ALL

1 Rookie

 • 

45 Posts

May 1st, 2023 11:00

Nevermind, I got that option to revert the host hcl setting but after deny the host hcl setting, I am still able to access share. How host-hcl exactly going to impact share access ?

Thanks

1 Rookie

 • 

45 Posts

May 1st, 2023 11:00

Thank you. How to revert the impact of this command ? My share is showing "-" infront of Host ACL.

Thanks

1 Rookie

 • 

45 Posts

May 1st, 2023 12:00

Thanks. I think I got solution for my requirement (put permission-type=deny) and that will stop allowing any new connection with share. Now I am trying to findout if any way to stop any existing connection with share like someone already connected with share and doing something and I "denied" that share from Isilon and user will get error message? 

Thanks

1 Rookie

 • 

20.4K Posts

May 1st, 2023 12:00

As soon as I set the host-acl and try to connect to the share, I am getting challenged to enter my credentials which I normally don't have to enter because I am connecting from a computer that is joined to AD.

1 Rookie

 • 

45 Posts

May 3rd, 2023 07:00

Ok, ye, you are right. Let me try that and Thanks for all your responses.

No Events found!

Top