SMB Share access issue

[cibin....@gmail.com]

I have created an SMB share '/ifs/data/ACZ-1/Share1' under an Access Zone ("ACZ-1"). I have given everyone full control to the share. When I tried to access the share name via smartconnect zone name from windows server using RUN prompt "\\SMARTCONNECT\ifs\data\ACZ-1\Share1", it is asking for credentials, which credentials I have to give or how can I avoid asking credentials in future?

I am using Active Directory as an authentication provider for Access Zone (ACZ-1)

Please help me to fix this issue.

[mandar kolhe]

Is your smartconnect/ fqdn belongs to same zone? Also you don't need to give path it should be \\smartconnect/sharename

If it still asks for credentials it means kerberos authentication is not happening 

--
You received this message because you are subscribed to the Google Groups "Isilon Technical User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isilon-user-gr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/9b738ae9-ad08-4652-8e92-bd25469c3de2n%40googlegroups.com.

[Berlin Vijayakumar]

You have to create file system permissions to access the share through windows explorer without any access issue. I personally follow one of below 2 methods. 

1. Adding security permissions manually for the required AD groups using chmod command from Isilon CLI to share path

/ifs/data/ACZ-1/Share1

2. Create a hidden share under access zone one level up to shares. Apply root permission to windows admin or security admin group and delete everyone access to this hidden share. So that sub folder (share folder) permissions can be managed easily from windows explorer.

Example in your case hidden share name can be "ACZ-1$" and path /ifs/data/ACZ-1/ 

# isi smb share create ACZ-1$ /ifs/data/ACZ-1/ 

#isi smb share permission delete ACZ-1$ --wellknown Everyone

#isi smb share permission create ACZ-1$ --group="abc\\domain admins" --run-as-root

Now you can connect to "\\smartconnectzonename.domain.com\ACZ-1$\" and manage permissions for "Share1" folder from windows explorer 

Thanks,

Berlin

--

[Cibin Varghese]

Thanks for the detailed explanation. However, I am able to access the path "\\smartconnect.domain.com\Share1" but unable to browse using windows explorer using the full path ie. "\\smartconnect.domain.com\ifs\data\ACZ-1\Share1", how can I browse the full paths seamlessly.

Thanks & Regards,

Cibin Varghese

___________________________________

To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/CALyhPEPrEUxkM14o3S%2B8Ex6ZOnVE_Xwp%3D-K_jhgBo-w5stKdsA%40mail.gmail.com.

[avinash patil]

There has to be another share with name  ifs$ pointing to ifs directory, try using that \\smarconnect\ifs$

To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/CAOhQtfabgYTz6bcw1yP8Ds5g3aLz4%2BUGf5nR7ijUdGK0SHNSXw%40mail.gmail.com.

--

Avinash B Patil

[Cibin Varghese]

Yes, there is a share ifs$ under SYSTEM access zone, but when I try to access using '\\smartconnect\ifs$' it is asking for credentials, I tried with multiple users like 'root', LOCAL:system\user1, etc but none of them are allowing to browse through ifs.

To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/CAN09CHN0-NuhNEE0dUrJfnVZay4ZYu7%3DjaShQ8C_eNd3rHVENw%40mail.gmail.com.

[Berlin Vijayakumar]

Try with the path \\smartconnect.domain.com\ifs$\data\ACZ-1\Share1

This will allow you to access "Share1" folder through ifs$ share. If this doesn't work you have to check the filesystem permission for ifs$ share and modify it accordingly with steps which i shared with you earlier.

Make sure that ifs$ share is pointing to \ifs path.

Thanks,

Berlin

To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/CAOhQtfbzP9G4Am-8KJcPBF5OONnRx6mrWSPT6FjwrJ2_zHFjmg%40mail.gmail.com.

[Cibin Varghese]

I have checked the permission for ifs$,  it is having 'Everyone Full Control'.

When I tried to access ifs$ from windows explorer it asked for credentials, which credentials do I need to give to get access?

To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/CALyhPEPymf63%2BW831SDK6PNjVAm57Vgx9%2B_NrXxZrOnWSY4Zag%40mail.gmail.com.

[Berlin Vijayakumar]

Please don't get confused between share permission and file system permissions. For ifs$ you have share level permission. To check security permissions login to isilon cli and run the command "ls -led /ifs" you will get to know whether your AD group is part of it or not and what kind of permission it holds. If its not there add it with chmod command, then you should be able to access.

Thanks,

Berlin

To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/CAOhQtfbnM4xOnv%2BCi412oeT17f7Z5xNQoJe6wr8-p-1t6WprAg%40mail.gmail.com.

[mandar kolhe]

Make sure from cli you're in correct zone while checking file level permissions 

To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/CALyhPEMt1NKxEBGsBhWnbV8DnOfHeoaB_cwpYSTiQLnG-7LM4w%40mail.gmail.com.

[Cibin Varghese]

I tried the below-mentioned steps (permissions set for AD users), but still, it is asking for credentials, I tried accessing with my AD id and it is not accepting it. which credentials do I need to use for accessing it? Is there any way we can access ifs$ using a local account?

Thanks & Regards,

Cibin Varghese

_______________________________________________________________________________

To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/CAJH3o5HhX8Uc_KFjEus4viQNB-Yhfsuqam92%3DjfY7Rp2%3DPFRjg%40mail.gmail.com.

[Adam Fox]

Is your system zone in the AD domain?  Each domain can have its own set of authentication sources.  If you are not used to using shares in the System zone it’s common to not add it to AD.

[Cibin Varghese]

My ifs$ share is in SYSTEM Zone and that zone doesnt have any authentication provider. User shares 'Share1' is 'ACZ-1' access zone and this having AD authentication provider.

Thanks & Regards,

Cibin Varghese

_______________________________________________________________________________

--
You received this message because you are subscribed to a topic in the Google Groups "Isilon Technical User Group" group.
To unsubscribe from this topic, visit https://groups.google.com/d/topic/isilon-user-group/NwSA6JHWZUA/unsubscribe.
To unsubscribe from this group and all its topics, send an email to isilon-user-gr...@googlegroups.com.
To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/20DAB8A7-A1E2-4B91-9773-C7C42A926009%40yahoo.com.