Sun Microsystems, Inc.  Sun System Handbook - ISO 4.1 October 2012 Internal/Partner Edition
   Home | Current Systems | Former STK Products | EOL Systems | Components | General Info | Search | Feedback

Asset ID: 1-71-1439412.1
Update Date:2012-07-09
Keywords:

Solution Type  Technical Instruction Sure

Solution  1439412.1 :   Sun Storage 7000 Unified Storage System: Tips for Configuring Shares for Windows clients  


Related Items
  • Sun Storage 7310 Unified Storage System
  •  
  • Sun Storage 7410 Unified Storage System
  •  
  • Sun ZFS Storage 7120
  •  
  • Sun ZFS Storage 7320
  •  
  • Sun Storage 7110 Unified Storage System
  •  
  • Sun ZFS Storage 7420
  •  
  • Sun Storage 7210 Unified Storage System
  •  
Related Categories
  • PLA-Support>Sun Systems>DISK>NAS>SN-DK: 7xxx NAS
  •  
  • .Old GCS Categories>Sun Microsystems>Storage - Disk>Unified Storage
  •  




In this Document
Goal
Fix


Created from <SR 3-3740498461>

Applies to:

Sun ZFS Storage 7120 - Version Not Applicable to Not Applicable [Release N/A]
Sun ZFS Storage 7320 - Version Not Applicable to Not Applicable [Release N/A]
Sun Storage 7110 Unified Storage System - Version Not Applicable to Not Applicable [Release N/A]
Sun Storage 7310 Unified Storage System - Version Not Applicable to Not Applicable [Release N/A]
Sun Storage 7210 Unified Storage System - Version Not Applicable to Not Applicable [Release N/A]
7000 Appliance OS (Fishworks)

Goal

This document provides configuration basics and tips for configuring shares for use with Windows clients.

Fix

The first step is the share creation dialog. Here, you'll want to name the share, select the "Use Windows Default Permissions" radio button, and change the owner and group. Use known AD users that will have some permissions, instead of the default nobody/other/root UNIX users and things will be easier to configure. You can use either the user@FQDN or shortdomainname\user format to enter these names.





Next is the protocols screen. Change the Resource Name to "on". (You may have to clear the "Inherit from Project" checkbox) This shares the filesystem with a share name that matches the filesystem name. For virtually all configurations, you should leave the Share Level ACL settings at the default of Everyone/Full Control. Note that these default settings don't appear until you've changed the Resource Name. You will configure file and directory settings on the next screen.





Last is the Access screen. First, you should confirm that the ACL behavior on mode change and inheritance pulldowns read Do Not Change ACL and Inherit All Entries. These are the best settings for Windows compatibility.





Also on the access screen, you will configure the Access Control for the root of the share. For compatibility with other operating systems, and keeping the ACLs as clean and direct as possible, you should make use of the owner and group objects by assigning permissions to the owner and group you chose in the first step. You can also change these owners at the top of this screen.

You will use the Root Directory ACL section to configure permissions. You can add and delete lines, and for each you can define permissions for either owner, group, everyone, named user or named group.





To edit these, click the pencil icon on each line, and you'll be presented with this edit screen. In the upper left, there is a pulldown with a list of the standard Windows permission sets, which avoids the inconvenience of selecting the individual checkboxes.




At this point configuration is complete. From here on, you will use your standard Windows tools to configure security on files and directories.


Attachments
This solution has no attachment
  Copyright © 2012 Sun Microsystems, Inc.  All rights reserved.
 Feedback