Skip to main content

Adding, removing, or replacing trusted domains in preferred trusted domain lists

You can add or remove trusted domains from the preferred trusted domain list for the CIFS server or you can modify the current list. If you configure a preferred trusted domain list, this list is used instead of the discovered bidirectional trusted domains when performing multidomain name mapping searches.

About this task

  • If you are adding trusted domains to an existing list, the new list is merged with the existing list with the new entries placed at the end. The trusted domains are searched in the order they appear in the trusted domain list.

  • If you are removing trusted domains from the existing list and do not specify a list, the entire trusted domain list for the specified storage virtual machine (SVM) is removed.

  • If you modify the existing list of trusted domains, the new list overwrites the existing list.

Note
You should enter only bidirectionally trusted domains in the preferred trusted domain list. Even though you can enter outbound or inbound trust domains into the preferred domain list, they are not used when performing multidomain name mapping searches. ONTAP skips the entry for the unidirectional domain and moves on to the next bidirectional trusted domain in the list.
Perform one of the following actions:
If you want to do the following with the list of preferred trusted domains...Use the command...
Add trusted domains to the listvserver cifs domain name-mapping-search add -vserver vserver_name -trusted-domains FQDN, ...
Remove trusted domains from the listvserver cifs domain name-mapping-search remove -vserver vserver_name [-trusted-domains FQDN, ...]
Modify the existing listvserver cifs domain name-mapping-search modify -vserver vserver_name -trusted-domains FQDN, ...

Examples​

The following command adds two trusted domains (cifs1.example.com and cifs2.example.com) to the preferred trusted domain list used by SVM vs1:

cluster1::> vserver cifs domain name-mapping-search add -vserver vs1 
-trusted-domains cifs1.example.com, cifs2.example.com

The following command removes two trusted domains from the list used by SVM vs1:

cluster1::> vserver cifs domain name-mapping-search remove -vserver vs1 
-trusted-domains cifs1.example.com, cifs2.example.com

The following command modifies the trusted domain list used by SVM vs1. The new list replaces the original list:

cluster1::> vserver cifs domain name-mapping-search modify -vserver vs1 
-trusted-domains cifs3.example.com