HP StorageWorks 4000s NAS 4000s and 9000s Administration Guide - Page 184

Creating a Sample NFS File Share, Browse, Restore, Properties, Security, Advanced

Page 184 highlights

Microsoft Services for NFS 2. Type the path and name of the file in the File path and name field or click Browse to locate the file. 3. After locating the file, click Restore. Creating a Sample NFS File Share HP recommends performing the following tests to verify that the setup of the shares, user mappings, and permissions grant the desired access to the NFS shares. 1. Create an NFS share. NFS Shares are All Machines, read-only by default. See "NFS File Shares" earlier in this chapter for information on creating shares. 2. Create NFS client groups if desired. See "NFS Client Groups" earlier in this chapter. 3. Verify that the NFS share exists. Use Remote Desktop to log into the NAS server and access the command line interface: nfsshare (sharename represents the name of the share) 4. Map a user. When creating Active Directory/Domain mappings, ensure that the NFS Authentication software is installed on the domain controllers that have user name mappings. See "Installing NFS Authentication Software on the Domain Controllers and Active Directory Domain Controllers" section. Also, see "User and Group Mappings" in this chapter for instructions on setting up user name mappings. When planning to allow only anonymous access to an NFS share, setting up user name mappings is not necessary. See the section, "Anonymous Access to an NFS Share" in this chapter for additional information. 5. Verify the NTFS permissions are correct on the NFS share. If the NFS share was assigned All Machines read write, then the NTFS ACLs on the NFS share must allow read/write permissions for the user or group. Example: e:\share1 is the name of the NFS share and share1 has All Machines read write permissions. Verify that the NTFS permissions on e:\share1 are List Folder/Read Data, Create File/Write Data, Create Folders/Append Data, Write Attributes, and Delete Subfolders and Files. This can be verified by opening up Windows Explorer on the NAS Desktop and right-clicking e:\share1 then clicking Properties. Next, click the Security tab. Then click Advanced. Highlight the user or group that permissions are being assigned to then click Edit. There will be check boxes next to the NTFS permissions that are assigned. Make sure mapped users and groups correlate to the users or groups that have the NTFS permissions assigned. See the section "Understanding NTFS and UNIX Permissions" in this chapter for more information. 6. Verify that the mappings exist. Use Remote Desktop to log in to the NAS server and access the command line interface: mapadmin list -all 7. On the Linux/UNIX system, use the mapped user to create a file. a. As the root user, mount the share: mount -t nfs /mount point b. Log in as a mapped user. c. Change directories to the mount-point directory. 184 NAS 4000s and 9000s Administration Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246

Microsoft Services for NFS
184
NAS 4000s and 9000s Administration Guide
2.
Type the path and name of the file in the File path and name field or click
Browse
to locate
the file.
3.
After locating the file, click
Restore
.
Creating a Sample NFS File Share
HP recommends performing the following tests to verify that the setup of the shares, user
mappings, and permissions grant the desired access to the NFS shares.
1.
Create an NFS share. NFS Shares are All Machines, read-only by default.
See “NFS File Shares” earlier in this chapter for information on creating shares.
2.
Create NFS client groups if desired. See “NFS Client Groups” earlier in this chapter.
3.
Verify that the NFS share exists.
Use Remote Desktop to log into the NAS server and access the command line interface:
nfsshare <sharename>
(sharename represents the name of the share)
4.
Map a user. When creating Active Directory/Domain mappings, ensure that the NFS
Authentication software is installed on the domain controllers that have user name
mappings. See “Installing NFS Authentication Software on the Domain Controllers and
Active Directory Domain Controllers” section. Also, see “User and Group Mappings” in
this chapter for instructions on setting up user name mappings.
When planning to allow only anonymous access to an NFS share, setting up user name
mappings is not necessary. See the section, “Anonymous Access to an NFS Share” in this
chapter for additional information.
5.
Verify the NTFS permissions are correct on the NFS share. If the NFS share was assigned
All Machines read write, then the NTFS ACLs on the NFS share must allow read/write
permissions for the user or group.
Example:
e:\share1
is the name of the NFS share and share1 has All Machines read write
permissions. Verify that the NTFS permissions on e:\share1 are List Folder/Read Data,
Create File/Write Data, Create Folders/Append Data, Write Attributes, and Delete
Subfolders and Files. This can be verified by opening up Windows Explorer on the NAS
Desktop and right-clicking e:\share1 then clicking
Properties
. Next, click the
Security
tab. Then click
Advanced
. Highlight the user or group that permissions are being assigned
to then click
Edit
. There will be check boxes next to the NTFS permissions that are
assigned. Make sure mapped users and groups correlate to the users or groups that have
the NTFS permissions assigned. See the section “Understanding NTFS and UNIX
Permissions” in this chapter for more information.
6.
Verify that the mappings exist.
Use Remote Desktop to log in to the NAS server and access the command line interface:
mapadmin list -all
7.
On the Linux/UNIX system, use the mapped user to create a file.
a.
As the root user, mount the share:
mount -t nfs <nfs server IP address:/nfs share> /mount
point
b.
Log in as a mapped user.
c.
Change directories to the mount-point directory.