Sun ZFS Storage 7420
 
Oracle ZFS Storage ZS5-2
 
Oracle ZFS Storage ZS3-2
 
Sun Storage 7110 Unified Storage System
 
Sun Storage 7210 Unified Storage System
 
Oracle ZFS Storage ZS4-4
 
Sun Storage 7410 Unified Storage System
 
Oracle ZFS Storage ZS5-4
 
Oracle ZFS Storage ZS3-4
 
Sun ZFS Storage 7120
 
Sun Storage 7310 Unified Storage System
 
Sun ZFS Storage 7320
 
Oracle ZFS Storage ZS3-BA
 

PLA-Support>Sun Systems>DISK>ZFS Storage>SN-DK: ZS
 
_Old GCS Categories>Sun Microsystems>Storage - Disk>Unified Storage
 

In this Document

Goal

Solution

Created from <SR 3-3740498461>

Applies to:

Goal

This document provides configuration basics and tips for configuring shares for use with Windows clients.

Solution

The first step is the share creation dialog. Here, you'll want to name the share, select the "Use Windows Default Permissions" radio button, and change the owner and group.

Use known AD users that will have some permissions, instead of the default nobody/other/root UNIX users and things will be easier to configure.

You can use either the user@FQDN or shortdomainname\user format to enter these names.





Next is the protocols screen. Change the Resource Name to "on". (You may have to clear the "Inherit from Project" checkbox)

This shares the filesystem with a share name that matches the filesystem name.

For virtually all configurations, you should leave the Share Level ACL settings at the default of Everyone/Full Control.

Note that these default settings don't appear until you've changed the Resource Name.

You will configure file and directory settings on the next screen.





Last is the Access screen. First, you should confirm that the ACL behavior on mode change and inheritance pulldowns read Do Not Change ACL and Inherit All Entries.

These are the best settings for Windows compatibility.





Also on the access screen, you will configure the Access Control for the root of the share.

For compatibility with other operating systems, and keeping the ACLs as clean and direct as possible, you should make use of the owner and group objects by assigning permissions to the owner and group you chose in the first step.

You can also change these owners at the top of this screen.

You will use the Root Directory ACL section to configure permissions.

You can add and delete lines, and for each you can define permissions for either owner, group, everyone, named user or named group.





To edit these, click the pencil icon on each line, and you'll be presented with this edit screen.

In the upper left, there is a pulldown with a list of the standard Windows permission sets, which avoids the inconvenience of selecting the individual checkboxes.




At this point configuration is complete. From here on, you will use your standard Windows tools to configure security on files and directories.

**Checked for relevance on 10-DEC-2013

**Checked for relevance on 02-MAY-2018

This solution has no attachment