Permission Tips and FAQs
You can use either of the two SMB share option methods below to limit access to a Samba share based on a host or a network; both methods follow the format defined in hosts_access(5) used by tcp_wrapper.
This option allows you to deny access to a share for a certain host or a network.
Example
To prevent access from all nodes within the network 192.168.1.0/24 and from the node 10.10.10.1 and bad-node.example.com:
This option specifies the list of networks or hosts with access to the share. It overrides hosts deny; if you do not define hosts deny, then 0.0.0.0/0 is used.
Example
To limit access to a share, to a network 192.168.2.0/24 and a host 10.10.10.2:
When you issue the mount -t smbfs or mount_smbfs command to mount a directory as an SMB share from an OSX terminal, you cannot change the directory's UNIX permissions.
To change a directory's UNIX permissions, do one of the following:
- Access the directory from the Appliance Controller, and then change the directory's UNIX permissions.
- Mount the directory from a Linux client, and then change the directory's UNIX permissions.
Setting Unix permissions on an OS X Samba client can silently fail under the following circumstances:
- The Samba mount is performed under the sysadmin credentials.
- Active Directory is not used.
- Local Mac credential authentication is used when creating files.
Perform the following steps to create files and change permissions, and ensure that the OS X Samba client remains active and operational.
- Make sure that the Mac Samba client's user ID matches the Appliance Controller user ID.
- Use Active Directory to authenticate access to shares.
If a user is a member of more than 16 groups, then NFS does not process the group permission of the extra groups.
To resolve this issue, execute the command /usr/sbin/rpc.mountd with the option --manage-gids (for additional information, see NFS rpc.mountd Options). Run the command nas rpcmountd options change to update the rpc.mountd option:
Example:
> nas rpcmountd options change --manage-gids
This will disrupt NFS access. Please unmount all NFS clients prior to doing this. Continue (yes/No)? yes
Updating value on local node...
Additional rpc.mountd options are: --manage-gids