File Sharing - Fujitsu ETERNUS DX S5 Series Design Manual

4. NAS Functions

File Sharing

File Sharing
Each client can share files in the NAS file system for the ETERNUS DX. For file sharing, the CIFS protocol is used
for Windows and the NFS protocol is used for UNIX/Linux.
■
Shared Folder
To share files, create shared folders in the file system for the ETERNUS DX that support the protocol that is to be
used. Shared folders are directories that are created in the root directory of the file system.
Up to 256 shared folders can be created in the ETERNUS DX. When creating multiple file systems, the total
number of shared folders in each file system cannot exceed 256.
Note
During the operation phase
• Before deleting all the data in the shared folder with the NAS data deletion function or before deleting
the shared folders, remove the client connections (by unmounting for NFS or by disconnecting the
network drive for CIFS).
• SMB signing is enabled on CIFS shared folders by default. If SMB signing is enabled or required on the
CIFS client, the communication is signed by SMB.
■
Access Privileges (Permissions) for Shared Folders
Each shared folder can be set with a protocol that enables access to it and the range of access that is allowed.
For shared folders, "Owner" for the folder and "Group" to which the owner belongs can be specified. A user that
receives ownership or a user in a group that receives ownership is granted access privileges (permissions) to the
shared folders. Regardless of whether the authentication server (Active Directory or LDAP) is used, if the shared
folder is created by omitting the Owner setting and the Group setting, "root" is set as the owner of the shared
folder and has full control (rwxrwxrwx).
Hosts that are allowed or denied access to the shared folders can be specified. In an IPv6 environment, global
addresses and local addresses can be set with an IP address. Link-local addresses cannot be set with an IP
address.
Caution
During the configuration phase
• If only the owner is specified for the shared folder, the "rwx" access privilege is added for the specified
user. For this setting, other users cannot access the shared folder.
• If only the group is specified for the shared folder, the "rwx" access privilege is added for the root user
and the specified group. For this setting, other users cannot access the shared folder.
• For shared folders that are accessed with CIFS access, the recommended configuration is to set the
owner and group to "root" and then configure the CIFS access permission setting for access control.
- If the owner and group of the shared folder is "root", access control cannot be performed for the root
folder of the shared folder. Therefore, set the access privileges using the CIFS access permission
setting.
- If the owner and group of the CIFS shared folder or CIFS/NFS shared folder is not "root", users who are
not the owner or users who do not belong to the group are denied access to the shared folder.
- Even if the access privilege is set to "everyone" by the CIFS access permission setting or by the access
control setting of the CIFS client, if the owner and group of the shared folder is not "root", users who
are not the owner or users who do not belong to the group cannot access those shared folders.
184 Design Guide