Updated for 8.2.1 Data ONTAP® 8.2 File Access and Protocols Management Guide For 7-Mode NetApp, Inc. Telephone: +1 (408) 822-6000 Part number: 215-08750_A0 495 East Java Drive Fax: +1 (408) 822-4501 February 2014 Sunnyvale, CA 94089 Support telephone: +1 (888) 463-8277 U.S. Web: www.netapp.com Feedback: [email protected] Table of Contents | 3 Contents Considerations before configuring file access .......................................... 13 File protocols that Data ONTAP supports ................................................................ 13 How Data ONTAP controls access to files ............................................................... 13 Authentication-based restrictions .................................................................. 13 File-based restrictions ................................................................................... 13 How Data ONTAP supports file access using NFS ................................. 15 Enabling or disabling NFS on the storage system ..................................................... 15 Exporting or unexporting file system paths .............................................................. 16 Editing the /etc/exports file ........................................................................... 16 Using the exportfs command ......................................................................... 17 Enabling and disabling fencing of one or more NFS clients from one or more file system paths .................................................................................................. 20 Displaying the actual file system path for an exported file system path ................... 21 Displaying the export options for a file system path ................................................. 21 How the access cache works ..................................................................................... 22 Adding entries to the access cache ................................................................ 22 Removing entries from the access cache ....................................................... 23 Viewing access cache statistics ..................................................................... 24 Optimizing access cache performance .......................................................... 24 Setting access cache timeout values .............................................................. 24 Enabling Kerberos v5 security services for NFS ...................................................... 25 NFS clients that support Kerberos v5 security services ................................ 26 Configuring Kerberos v5 security services for NFS to use an Active- Directory-based KDC .............................................................................. 26 Configuring Kerberos v5 security services for NFS to use a UNIX-based KDC ......................................................................................................... 29 Debugging mounting problems ................................................................................. 35 Displaying mount service statistics ............................................................... 35 Tracing mountd requests ............................................................................... 36 Use of hard mounts ....................................................................................... 36 Displaying NFS statistics .......................................................................................... 36 Controlling NFS requests from nonreserved ports .................................................... 37 4 | File Access and Protocols Management Guide Enabling or disabling NFSv2 .................................................................................... 37 Enabling or disabling NFSv3 .................................................................................... 38 Support for VMware vStorage over NFS .................................................................. 38 Enabling or disabling VMware vStorage over NFS ...................................... 39 Displaying statistics for VMware vStorage over NFS .................................. 39 Differences in file system ID handling for NFSv3 and NFSv4 ................................ 39 Supporting NFSv4 clients ......................................................................................... 40 NFSv4.0 functionality supported by Data ONTAP ...................................... 40 Limitations of Data ONTAP support for NFSv4 .......................................... 41 How the pseudo-fs in NFSv4 affects mountpoints ........................................ 41 Enabling or disabling NFSv4.0 ..................................................................... 42 Specifying the user ID domain for NFSv4 .................................................... 42 Managing NFSv4 ACLs ................................................................................ 43 Managing NFSv4 file delegations ................................................................. 45 Configuring NFSv4 file and record locking .................................................. 49 How the name server database cache works ................................................. 50 Flushing the name server database cache ...................................................... 51 Differences in NFS user and group ID formats ............................................. 51 Allowing or disallowing NFSv4 user and group IDs as numeric strings ...... 52 Supporting PC-NFS clients ....................................................................................... 52 How the pcnfsd daemon works ..................................................................... 52 Enabling or disabling the pcnfsd daemon ..................................................... 53 Creating PC-NFS user entries in the storage system's local files .................. 53 How umask works with NFS file permissions .............................................. 54 Defining the umask for files and directories that PC-NFS users create ........ 54 Supporting WebNFS clients ...................................................................................... 55 Enabling or disabling the WebNFS protocol ................................................ 55 Setting a WebNFS root directory .................................................................. 55 Support for NFS over IPv6 ........................................................................................ 56 Enabling or disabling NFS over IPv6 ........................................................... 56 Textual representation of IPv6 addresses ...................................................... 57 File access using SMB ................................................................................ 58 Unsupported Windows features ................................................................................ 58 Configuring CIFS licenses ........................................................................................ 58 Connecting the MMC to the storage system ............................................................. 59 Configuring CIFS on your storage system ................................................................ 59 Table of Contents | 5 Supported SMB clients and domain controllers ............................................ 59 What the cifs setup command does ............................................................... 60 Requirements for the CIFS server name ....................................................... 60 Setting up your system initially ..................................................................... 60 Specifying WINS servers .............................................................................. 60 Changing the storage system domain ............................................................ 61 Changing protocol modes .............................................................................. 62 Effective style of qtrees created on an NTFS volume before configuring CIFS ......................................................................................................... 64 Specifying Windows user account names ..................................................... 64 Support for the Windows “Owner Rights” security principal ....................... 65 Considerations when reconfiguring CIFS ..................................................... 66 Reconfiguring CIFS on your storage system ................................................ 67 Configuring SMB on your storage system ................................................................ 68 Support for the SMB 1.0 protocol ................................................................. 68 Support for the SMB 2.0 protocol ................................................................. 68 Support for the SMB 2.1 protocol ................................................................. 68 When to enable the SMB 2.0 and SMB 2.1 protocols .................................. 69 Enabling or disabling SMB 2.x ..................................................................... 69 SMB 2.x and durable handles ....................................................................... 70 Monitoring durable handle status .................................................................. 70 Support for SMB signing .............................................................................. 71 Managing shares .......................................................................................................