Granting null users access to file system shares

You can allow access to your storage system resources by null session clients by assigning a group to be used by null session clients and recording the IP addresses of null session clients to add to the storage system’s list of clients allowed to access data using null sessions.

1. Use the vserver name-mapping create command to map the null user to any valid windows user, with an IP qualifier.

   Example

   The following command maps the null user to user1 with a valid host name google.com:

   vserver name-mapping create –direction win-unix  -position 1 –pattern “ANONYMOUS LOGON” –replacement user1
    – hostname google.com
   

   Example

   The following command maps the null user to user1 with a valid IP address 10.238.2.54/32:

   vserver name-mapping create –direction win-unix  -position 2 –pattern “ANONYMOUS LOGON” 
   –replacement user1 –address 10.238.2.54/32
   
2. Use the vserver name-mapping show command to confirm the name mapping.

   Example

   vserver name-mapping show
   
   Vserver:   vs1
   Direction: win-unix
   Position Hostname         IP Address/Mask
   -------- --------         ----------------
   1       -                 10.72.40.83/32      Pattern: anonymous logon
                                             Replacement: user1
   
   
3. Use the vserver cifs options modify –win-name-for-null-user command to assign Windows membership to the null user.

   This option is applicable only when there is a valid name mapping for the null user.

   Example

   vserver cifs options modify -win-name-for-null-user user1
   
4. Use the vserver cifs options show command to confirm the mapping of the null user to the Windows user or group.

   Example

   vserver cifs options show
   
   Vserver :vs1
   
   Map Null User to Windows User of Group: user1