Cifs Access Control - Quantum DXi2500-D Manual

CIFS Access Control

NAS CLI Configuration Commands
Delete a Share Administrator
syscli --del shareadmin --name <domain_user_or_group_name>
This CLI command allows the CLI admin to remove the share admin rights from
an existing share administrator. The syntax for the domain user/group name is
the same as discussed in the command --add shareadmin. This command
works only if the system is joined to an ADS domain.
Delete All Share Administrators
syscli --deleteall shareadmin [--sure]
This CLI command allows the CLI admin to remove the share admin rights from
all domain users or groups that have previously been granted this privilege (that
is, share administrators) except the built-in domain admins group. This
command works only if the system is joined to an ADS domain. If the --sure
option is specified, no confirmation prompt will be displayed.
There are two types of users who are allowed access CIFS shares depending on
whether the system is joined to a workgroup or a Windows domain.
When the server is joined to a workgroup, only workgroup users can access CIFS
shares and the CLI shall provide the capabilities to manage them. Workgroup
users are users who are both in the local Linux database and the Samba
password database.
When the server is joined to a Windows domain, domain users are allowed to
access CIFS shares but the CLI shall not provide the capabilities to manage them.
To do this the Windows domain admin, not necessarily the CLI admin, has to log
in the Windows server and uses the Microsoft Management Console (MMC).
This CLI command merely provides a limited capability to grant share
administrator privileges to certain domain users. A share administrator has the
privilege of setting share permissions.
This CLI command applies when the system has joined a workgroup or a
Windows Domain. Otherwise, this CLI command will return an error.
The following CIFS Access Control commands are available:
• Listing Share Users
• Adding a Share User
• Deleting a Share User
• Deleting All Share Users
Listing Share Users
syscli --list shareuser --share <share_name>
This CLI command allows the CLI admin to display a list all workgroup users that
have access to the specified CIFS share. If the list is empty, it means all
workgroup users are allowed read-write access to the specified share.
Quantum DXi-Series Command Line Interface (CLI) Guide
6-66538-03 Rev C
November 2010
49