Skip to main content

Managing file access using SMB

After you create and configure a CIFS server on your storage virtual machine (SVM) and set up file access over SMB shares, there are a number of tasks you might want to perform to manage file access.

  • Using local users and groups for authentication and authorization
    You can create local users and groups on the storage virtual machine (SVM). The CIFS server can use local users for CIFS authentication and can use both local users and groups for authorization when determining both share and file and directory access rights.
  • Configuring bypass traverse checking
    Bypass traverse checking is a user right (also known as a privilege) that determines whether a user can traverse all the directories in the path to a file even if the user does not have permissions on the traversed directory. You should understand what happens when allowing or disallowing bypass traverse checking, and how to configure bypass traverse checking for users on storage virtual machines (SVMs).
  • Displaying information about file security and audit policies
    You can display information about file security on files and directories contained within volumes on storage virtual machines (SVMs). You can display information about audit policies on FlexVol volumes. If configured, you can display information about Storage-Level Access Guard and Dynamic Access Control security settings on FlexVol volumes.
  • Managing NTFS file security, NTFS audit policies, and Storage-Level Access Guard on SVMs using the CLI
    You can manage NTFS file security, NTFS audit policies, and Storage-Level Access Guard on storage virtual machines (SVMs) by using the CLI.
  • Configuring the metadata cache for SMB shares
    Metadata caching enables file attribute caching on SMB 1.0 clients to provide faster access to file and folder attributes. You can enable or disable attribute caching on a per-share basis. You can also configure the time-to-live for cached entries if metadata caching is enabled. Configuring metadata caching is not necessary if clients are connecting to shares over SMB 2.x or SMB 3.0.
  • Managing file locks
    You can display information about the current locks for an SVM as a first step to determining why a client cannot access a volume or file. You can use this information if you need to break file locks.
  • Monitoring SMB activity
    SMB activity can be monitored by displaying information about SMB sessions and open files. You can also display information about SMB statistics.