Administrator Guide

NOTE: Do not attempt to create an SMB share using MMC. Use MMC only to set SLPs.
Automatic ACL to UNIX Word 777 Mapping
When files with Windows ACLs are displayed from NFS clients, the FluidFS mapping algorithm shows a translated UNIX access
mode. Perfect translation is not possible, so a heuristic is used to translate from the rich Windows ACL to the 9 bits of the UNIX
word. However, when some special SIDs are used inside ACL (for example, creator-owner ACE), the mapping can be inaccurate.
For some applications, NFS clients must see the exact mapping or a mapping for more permissive access. Otherwise, the NFS
applications might not perform denied operations.
FluidFS versions 5 or later provide an option that causes all objects with SMB ACLs to be presented with UNIX Word 777 from
NFS clients (for display only). This option, which is disabled by default, can be configured under NAS Volume settings.
1. In the Storage view, select a FluidFS cluster.
2. Click the File System tab.
3. In the File System view, select a NAS volume.
4. Click Edit Settings.
5. In the Edit NAS Volume Settings panel, click Interoperability.
6. Select the Display ACL to UNIX 777 to NFS Clients Enabled checkbox.
NOTE: Actual data-access checks in FluidFS are still made against the original security ACLs.
This feature applies only to NAS volumes with Windows or mixed security style (for files with Windows ACLs).
Setting ACLs on an SMB Share
To set ACLs, use Windows Explorer procedures. When defining an ACL for a local user account, you must use this format:
client_vip_or_name\local_user_name
Setting SLPs on an SMB Share Using MMC
To set SLPs, use the Microsoft Management Console (MMC) with the Shared Folder snap-in to set permissions. Administrators
can use a predefined MMC file (.msc) from the Windows Server 2008/2012/2016 Start menu and add a Shared Folder snap-in
to connect to the FluidFS cluster.
About this task
The MMC does not let you chose which user to connect with a remote computer. By default, it forms the connection through
the user logged in to the machine. To connect through a different user:
● If the FluidFS cluster that you are trying to manage is joined to an Active Directory, log in to the management station with
domain\Administrator.
● Before using MMC, connect to the FluidFS cluster by using the client VIP address in the address bar of Windows Explorer.
Log in with the administrator account and then connect to MMC.
NOTE: You might need to reset the local administrator password first.
Steps
1. Click Start → Run.
2. Type mmc and click OK. The Console 1 - [Console Root] window opens.
3. Select File → Add/Remove Snap-in.
4. Select Shared Folders and click Add.
5. In the Shared Folders window, select Another computer and type the FluidFS cluster name (as configured in the DNS).
Alternatively, you can use a client VIP.
6. Click Finish. The new shares tree is displayed in the Console Root window.
7. Right-click the required SMB share and select Properties.
8. In the Share Properties window, click the Share Permission tab to set SLPs.
414
FluidFS Administration