SMB Share Access

[cibin....@gmail.com]

Hi Team,

I have created an SMB share and given permission to Everyone full control, however, when I tried to access this share from the windows server, it is asking for credentials. I tried with my AD id and also with Isilon root credentials as well, and both times it is not accepting my credentials, and unable to see the folders under that share. What could be the problem? How can I resolve this issue?

Thanks

CM

[Sage Belrose]

Please post the output of the following commands:

$shareRoot:str=/path/to/share/root
$shareName:str=SMB Share Name
$az: str=Access Zone Name

ls -ael $shareRoot
isi smb shares list —zone=$az
isi smb shares view $shareName —zone=$az

Sage Belrose
She/They
DevOps Engineer
ICPSR, ISR, University of Michigan
Bel...@umich.edu

> --
> You received this message because you are subscribed to the Google Groups "Isilon Technical User Group" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to isilon-user-gr...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/80b2db5a-a37e-4030-9997-965dc4920763n%40googlegroups.com.

[Cibin Varghese]

I have already checked all these already, nothing seems to be unusual. It is still popping up on the credential logon screen while accessing from the windows server. None of the credentials, (both local and AD) are not acceptable.

To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/0F032413-2B06-4AE8-A248-FB2BB258A885%40umich.edu.

[sc...@tacomadata.com]

Assuming both your Windows client and Isilon server are set up on the AD domain correctly, 

Access on Isilon is controlled at the 'share level' and at the 'filesystem level'.  It sounds like you have granted wide-open access at the share level and my guess is the file system permissions are blocking you.

If the directory you are trying to share is /ifs/test_share_dir you might see something like this from the CLI.

# ls -led /ifs/test_share_dir
drwxr-xr-x     2 root  wheel  0 Jan 19 15:10 /ifs/test_share_dir
 OWNER: user:root
 GROUP: group:wheel
 SYNTHETIC ACL
 0: user:root allow dir_gen_read,dir_gen_write,dir_gen_execute,std_write_dac,delete_child
 1: group:wheel allow dir_gen_read,dir_gen_execute
 2: everyone allow dir_gen_read,dir_gen_execute

The lines beginning with 0, 1, and 2 are the FACLs.  Add a FACL for your userid or group in the 'zeroth' position

# add userid permission to shared directory.

chmod +a# 0 user "MYDOMAIN\myuserid" allow dir_gen_all,object_inherit,container_inherit  /ifs/test_share_dir

# or add group permission to shared directory

chmod  +a# 0  group "MYDOMAIN\My Admin Group" allow dir_gen_all,object_inherit,container_inherit  /ifs/test_share_dir

You should then be able to access the share from windows and use Explorer to adjust permissions to suit. 

-Scott

[Cibin Varghese]

I have added following steps with my AD id, but still it is asking for credentials, and if I provided my credentials also, it is not accepting it.

# add userid permission to shared directory.

chmod +a# 0 user "MYDOMAIN\myuserid" allow dir_gen_all,object_inherit,container_inherit  /ifs/test_share_dir

--

You received this message because you are subscribed to the Google Groups "Isilon Technical User Group" group.
To unsubscribe from this group and stop receiving emails from it, send an email to isilon-user-gr...@googlegroups.com.

To view this discussion on the web visit https://groups.google.com/d/msgid/isilon-user-group/2e65898e-9091-4755-aa08-d96e4b2b9f9bn%40googlegroups.com.