1 Rookie
•
45 Posts
0
2152
Isilon: disable user access for shares/exports
Hi,
I have some exports & shares which I am planning to migrate to another Isilon using SyncIQ. During cutover, what is the best way to disable any user IO access for source exports/shares ? I know there is option to disable protocol for entire Isilon but in my case, I just want to disable user access for selective exports/shares. Pls suggest.
Thanks
dynamox
1 Rookie
1 Rookie
•
20.4K Posts
0
May 2nd, 2023 05:00
You are going to be looking for open files on every single node using "isi smb openfiles list" and then closing. Are you going to be looking for sessions using "isi smb sessions" and deleting them? Ultimately it's your call but I think you are creating more work for yourself then needed. Schedule downtime with your users, tell them to save their work and then delete the share. Do your SyncIQ work .etc and you are done. You can easily document the share settings and put them back after the fact.
rbhatewa
1 Rookie
1 Rookie
•
45 Posts
0
May 1st, 2023 09:00
Thanks but anyother better way rather removing shares/exports ? Wanted to keep source config alive just incase I have to roll back the change.
Thanks
dynamox
1 Rookie
1 Rookie
•
20.4K Posts
0
May 1st, 2023 09:00
I would remove the shares, and perform the final sync.
dynamox
1 Rookie
1 Rookie
•
20.4K Posts
0
May 1st, 2023 10:00
Deny access using host-acl
isi smb shares modify --host-acl=deny:ALL
rbhatewa
1 Rookie
1 Rookie
•
45 Posts
0
May 1st, 2023 11:00
Nevermind, I got that option to revert the host hcl setting but after deny the host hcl setting, I am still able to access share. How host-hcl exactly going to impact share access ?
Thanks
rbhatewa
1 Rookie
1 Rookie
•
45 Posts
0
May 1st, 2023 11:00
Thank you. How to revert the impact of this command ? My share is showing "-" infront of Host ACL.
Thanks
rbhatewa
1 Rookie
1 Rookie
•
45 Posts
0
May 1st, 2023 12:00
Thanks. I think I got solution for my requirement (put permission-type=deny) and that will stop allowing any new connection with share. Now I am trying to findout if any way to stop any existing connection with share like someone already connected with share and doing something and I "denied" that share from Isilon and user will get error message?
Thanks
dynamox
1 Rookie
1 Rookie
•
20.4K Posts
0
May 1st, 2023 12:00
As soon as I set the host-acl and try to connect to the share, I am getting challenged to enter my credentials which I normally don't have to enter because I am connecting from a computer that is joined to AD.
rbhatewa
1 Rookie
1 Rookie
•
45 Posts
0
May 3rd, 2023 07:00
Ok, ye, you are right. Let me try that and Thanks for all your responses.