Start a Conversation

rbhatewa

updated

3 years ago

Solved!

Go to Solution

Closed

R

rbhatewa

1 Rookie

•

46 Posts

0

2961

May 1st, 2023 09:00

Isilon: disable user access for shares/exports

Hi,

I have some exports & shares which I am planning to migrate to another Isilon using SyncIQ. During cutover, what is the best way to disable any user IO access for source exports/shares ? I know there is option to disable protocol for entire Isilon but in my case, I just want to disable user access for selective exports/shares. Pls suggest.

Thanks

 

  • D

    dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    2029

    0

    Posted May 2nd, 2023 05:00

    You are going to be looking for open files on every single node using "isi smb openfiles list" and then closing.  Are you going to be looking for sessions using "isi smb sessions" and deleting them?  Ultimately it's your call but I think you are creating more work for yourself then needed.  Schedule downtime with your users, tell them to save their work and then delete the share.  Do your SyncIQ work .etc and you are done.  You can easily document the share settings and put them back after the fact.

  • R

    rbhatewa

    1 Rookie

    •

    46 Posts

    2076

    0

    Posted May 1st, 2023 09:00

    Thanks but anyother better way rather removing shares/exports ? Wanted to keep source config alive just incase I have to roll back the change.

    Thanks

  • D

    dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    2078

    0

    Posted May 1st, 2023 09:00

    I would remove the shares, and perform the final sync. 

  • D

    dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    2070

    0

    Posted May 1st, 2023 10:00

    Deny access using host-acl

     

    isi smb shares modify   --host-acl=deny:ALL

  • R

    rbhatewa

    1 Rookie

    •

    46 Posts

    2068

    0

    Posted May 1st, 2023 11:00

    Nevermind, I got that option to revert the host hcl setting but after deny the host hcl setting, I am still able to access share. How host-hcl exactly going to impact share access ?

    Thanks

  • R

    rbhatewa

    1 Rookie

    •

    46 Posts

    2069

    0

    Posted May 1st, 2023 11:00

    Thank you. How to revert the impact of this command ? My share is showing "-" infront of Host ACL.

    Thanks

  • R

    rbhatewa

    1 Rookie

    •

    46 Posts

    2066

    0

    Posted May 1st, 2023 12:00

    Thanks. I think I got solution for my requirement (put permission-type=deny) and that will stop allowing any new connection with share. Now I am trying to findout if any way to stop any existing connection with share like someone already connected with share and doing something and I "denied" that share from Isilon and user will get error message? 

    Thanks

  • D

    dynamox

    11 Legend

    •

    20419 Posts

    •

    87439 Points

    2067

    0

    Posted May 1st, 2023 12:00

    As soon as I set the host-acl and try to connect to the share, I am getting challenged to enter my credentials which I normally don't have to enter because I am connecting from a computer that is joined to AD.

  • R

    rbhatewa

    1 Rookie

    •

    46 Posts

    2002

    0

    Posted May 3rd, 2023 07:00

    Ok, ye, you are right. Let me try that and Thanks for all your responses.

Dell Support Resources

Latest Solutions

View More