IBM System Storage N series Data ONTAP 8.1 File Access and Protocols Management Guide For 7- Mode GA32-1043-02 Table of Contents | 3 Contents Preface ......................................................................................................... 13 About this guide ........................................................................................................ 13 Supported features ..................................................................................................... 13 Websites .................................................................................................................... 13 Getting information, help, and service ...................................................................... 14 Before you call .......................................................................................................... 14 Using the documentation ........................................................................................... 14 Hardware service and support ................................................................................... 15 Firmware updates ...................................................................................................... 15 How to send your comments ..................................................................................... 15 Introduction to file access management ................................................... 16 File protocols that Data ONTAP supports ................................................................ 16 How Data ONTAP controls access to files ............................................................... 16 Authentication-based restrictions .................................................................. 16 File-based restrictions ................................................................................... 16 File access using NFS ................................................................................. 18 Configuring NFS licenses ......................................................................................... 18 Exporting or unexporting file system paths .............................................................. 18 Editing the /etc/exports file ........................................................................... 19 Using the exportfs command ......................................................................... 20 Enabling and disabling fencing of one or more NFS clients from one or more file system paths .................................................................................................. 22 Displaying the actual file system path for an exported file system path ................... 23 Displaying the export options for a file system path ................................................. 23 How the access cache works ..................................................................................... 24 Adding entries to the access cache ................................................................ 25 Removing entries from the access cache ....................................................... 25 Viewing access cache statistics ..................................................................... 26 Optimizing access cache performance .......................................................... 26 Setting access cache timeout values .............................................................. 27 Enabling Kerberos v5 security services for NFS ...................................................... 28 4 | Data ONTAP 8.1 File Access and Protocols Management Guide for 7-Mode Configuring Kerberos v5 security services for NFS to use an Active- Directory-based KDC .............................................................................. 28 Configuring Kerberos v5 security services for NFS to use a UNIX-based KDC ......................................................................................................... 32 NFS clients that support Kerberos v5 security services ................................ 36 Debugging mounting problems ................................................................................. 36 Displaying mount service statistics ............................................................... 37 Tracing mountd requests ............................................................................... 37 Use of hard mounts ....................................................................................... 38 Displaying NFS statistics .......................................................................................... 38 Controlling NFS requests from nonreserved ports .................................................... 38 Enabling or disabling NFSv2 .................................................................................... 39 Enabling or disabling NFSv3 .................................................................................... 39 Support for VMware vStorage over NFS .................................................................. 40 Enabling or disabling VMware vStorage over NFS ...................................... 40 Differences in file system ID handling for NFSv3 and NFSv4 ................................ 41 Supporting NFSv4 clients ......................................................................................... 41 About Data ONTAP support of NFSv4 ........................................................ 42 Limitations of Data ONTAP support for NFSv4 .......................................... 42 How the pseudo-fs in NFSv4 affects mount points........................................ 43 Enabling or disabling NFSv4 ........................................................................ 44 Specifying the user ID domain for NFSv4 .................................................... 44 Managing NFSv4 ACLs ................................................................................ 44 Managing NFSv4 file delegations ................................................................. 47 Configuring NFSv4 file and record locking .................................................. 51 How the name server database cache works ................................................. 53 Flushing the name server database cache ...................................................... 53 Allowing or disallowing NFSv4 user and group IDs as strings .................... 54 Supporting PC-NFS clients ....................................................................................... 54 How the pcnfsd daemon works ..................................................................... 54 Enabling or disabling the pcnfsd daemon ..................................................... 55 Creating PC-NFS user entries in the storage system's local files .................. 55 How umask works with NFS file permissions .............................................. 56 Defining the umask for files and directories that PC-NFS users create ........ 56 Supporting WebNFS clients ...................................................................................... 57 Enabling or disabling the WebNFS protocol ................................................ 57 Table of Contents | 5 Setting a WebNFS root directory .................................................................. 57 NFS over IPv6 ........................................................................................................... 58 Enabling or disabling NFS over IPv6 ........................................................... 58 Textual representation of IPv6 addresses ...................................................... 59 File access using CIFS ................................................................................ 60 Unsupported Windows features ................................................................................ 60 Configuring CIFS licenses ........................................................................................ 60 Connecting the MMC to the storage system ............................................................. 61 Configuring CIFS on your storage system ................................................................ 61 Supported CIFS clients and domain controllers ............................................ 61 What the cifs setup command does ............................................................... 61 Requirements for the CIFS server name ....................................................... 62 Setting up your system initially ..................................................................... 62 Specifying WINS servers .............................................................................. 62 Changing the storage system domain ............................................................ 63 Changing protocol modes .............................................................................. 64 Specifying Windows user account names ..................................................... 66 Considerations when reconfiguring CIFS ..................................................... 67 Reconfiguring CIFS on your storage system ................................................ 68 Configuring SMB on your storage system ................................................................ 68 Support for the SMB 1.0 protocol ................................................................. 69 Support for the SMB 2.0 protocol ................................................................. 69 Support for the SMB 2.1 protocol ................................................................. 69