NETAPP UNIVERSITY
Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode
Exercise Guide
Course Number: STRSW-ILT-ANCDA-D87M Catalog Number: STRSW-ILT-ANCDA-D87M-EG Content Version: 1.0
ATTENTION
The information contained in this guide is intended for training use only. This guide contains information and activities that, while beneficial for the purposes of training in a closed, non-production environment,
can result in downtime or other severe consequences and therefore are not intended as a reference guide. This guide is not a technical reference and should not, under any circumstances, be used in production environments. To obtain reference materials, please refer to the NetApp product documentation located at http://now.netapp.com/ for product information.
COPYRIGHT
© 2010 NetApp, Inc. All rights reserved. Printed in the U.S.A. Specifications subject to change without notice.
No part of this book covered by copyright may be reproduced in any form or by any means—graphic, electronic, or mechanical, including photocopying, recording, taping, or storage in an electronic retrieval system—without prior written permission of the copyright owner. NetApp reserves the right to change any products described herein at any time and without notice.
NetApp assumes no responsibility or liability arising from the use of products or materials described herein, except as expressly agreed to in writing by NetApp. The use or purchase of this product or
materials does not convey a license under any patent rights, trademark rights, or any other intellectual property rights of NetApp. The product described in this manual may be protected by one or more U.S. patents, foreign patents,
or pending applications.
RESTRICTED RIGHTS LEGEND
NetApp Documentation is protected by Copyright and is provided to U.S. Government Agencies with LIMITED RIGHTS as defined at FAR 52.227-14(a). Use, duplication, or disclosure by the U.S. Government is subject to the restrictions as set forth therein. In the event of use by a DOD agency, the Government's rights in Documentation are governed by the restrictions in the Technical Data Commercial Items clause at DFARS 252.227-7015 and the Commercial Computer Software and Commercial Computer Software Documentation clause at DFARS 252.227-7202.
TRADEMARK INFORMATION
NetApp, the NetApp logo, Go Further, Faster, Data ONTAP, Appliance Watch, ASUP, AutoSupport, Bolt Design, Center-to-Edge,
ComplianceClock, ComplianceJournal, ContentDirector, Cryptainer, Data Motion, DataFabric, DataFort, Decru, Decru DataFort, Evolution of Storage, Exec-Vault, FAServer, FilerView, FlexCache, FlexClone, FlexShare, FlexVol, FPolicy, Get Successful, gFiler, LockVault, Manage ONTAP, MultiStore, NearStore, NetApp Availability Assurance, NetApp IT As A Service, NetApp ProTech Expert, NetCache, NOW, NOW (NetApp on the Web), ONTAPI, Raid-DP, Replicator-X, SANscreen, SecureAdmin, SecureShare, Shadow Tape, Simulate ONTAP, SmartClone, SnapCache, SnapCopy, SnapDrive, SnapLock, SnapManager, SnapMirror, SnapMover, SnapRestore, Snapshot, SnapStore, SnapSuite, SnapValidator, SnapVault, Spinnaker Networks, Spinnaker Networks logo, SpinCluster, SpinFlex, SpinFS, SpinHA, SpinMove, SpinServer, SpinStor, StoreVault, SyncMirror, Tech OnTap, Topio, vFiler, VFM, VFM (Virtual File Manager), WAFL, and Web Filer are either trademarks, registered trademarks, or service marks of NetApp, Inc. in the United States and/or other countries.
Not all common law marks used by NetApp are listed on this page. Failure of a common law mark to appear on this page does not mean that NetApp does not use the mark nor does it mean that the product is not actively marketed or is not significant within its relevant market. Apple and QuickTime are either trademarks or registered trademarks of Apple Computer, Inc. in the United States and/or other countries. Microsoft and Windows Media are either trademarks or registered trademarks of Microsoft Corporation in the United States and/or other countries.
RealAudio, RealNetworks, RealPlayer, RealSystem, RealText, RealVideo, RealMedia, RealProxy, and SureStream are either trademarks or registered trademarks of RealNetworks, Inc. in the United States and/or other countries.
All other brands or products are either trademarks or registered trademarks of their respective holders and should be treated as such. NetApp is a licensee of the CompactFlash and CF Logo trademarks.
E-3 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Welcome
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
TABLE OF CONTENTS
MODULE 1: NCDA OVERVIEW ... E1-1 MODULE 2: NFS OVERVIEW ... E2-1 MODULE 3: NFS SETUP ... E3-1 MODULE 4: EXPORTS AND MOUNTS ... E4-1 MODULE 5: CIFS OVERVIEW ... E5-1 MODULE 6: CIFS WORKGROUPS ... E6-1 MODULE 7: CIFS SHARES AND SESSIONS ... E7-1 MODULE 8: CIFS ACCESS CONTROL ... E8-1 MODULE 9: CIFS DOMAINS ... E9-1 MODULE 10: NAS MULTIPROTOCOL ... E10-1 MODULE 11: NAS TROUBLESHOOTING ... E11-1 MODULE 12: SAN OVERVIEW ... E12-1 MODULE 13: FC CONNECTIVITY ... E13-1 MODULE 14: ISCSI CONNECTIVITY ... E14-1 MODULE 15: LUN ACCESS ... E15-1 MODULE 16: AVAILABILITY OVERVIEW ... E16-1 MODULE 17: SNAPSHOT COPIES ... E17-1 MODULE 18: SNAPRESTORE ... E18-1 MODULE 19: SNAPVAULT ... E19-1 MODULE 20: OPEN SYSTEMS SNAPVAULT ... E20-1 MODULE 21: HIGH AVAILABILITY ... E21-1 MODULE 22: METROCLUSTER ... E22-1 MODULE 23: SNAPMIRROR ... E23-1 MODULE 24: PERFORMANCE ... E24-1 APPENDIX A: ANSWERS ... EA-1 APPENDIX B: MASTER CONFIGURATION WORKSHEET ... EB-1
MODULE 1: NCDA OVERVIEW
EXERCISE
OVERVIEW
In this exercise, you will identify your primary client machine for the course and install NetApp® System Manager on that machine.
OBJECTIVES
By the end of this exercise, you should be able to: Identify the exercise environment
Log in to the exercise environment
Install NetApp System Manager within your exercise environment
TIME ESTIMATE
E1-2 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NCDA Overview
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
EXERCISE 1: NCDA OVERVIEW
To prepare for the exercise environment, you will identify your main client machine, log in to the machine, and install NetApp System Manager.
TASK 1: IDENTIFY THE EXERCISE ENVIRONMENT
In this task, you will log in to your assigned exercise environment. You will perform all other actions starting from this assigned machine.
STEP ACTION
1. Your instructor will assist you in identifying your main Windows® Server. NOTE: This machine
might be a virtual machine.
With the assistance of your instructor, identify the following essential equipment:
DESKTOP CONNECTION Name: _____________________________ IP address: __________________________ Local Administrator Password: ___________________________ Domain Administrator Password: ___________________________ 2. Task complete. Windows Server
TASK 2: LOG IN TO THE EXERCISE ENVIRONMENT
In this task, you will log in to your assigned exercise environment. You will perform all other actions starting from this assigned machine.
STEP ACTION
1. In this task, you will log in to your assigned exercise environment by way of Remote Desktop
Connection. From this remote Windows environment, you will then have access to your exercise environment.
On your local Windows machine, log in to the remote Windows machine through the Remote Desktop Connection tool.
Click the Remote Desktop Connection link on your desktop. If this link is not available, then ask your instructor where to find the tool.
Type your IP address in to the Computer combo box and click the Connect button.
You might be asked to authenticate. If so, provide the user name and password given to you by your instructor.
You should see the desktop of the remote machine. All other tasks will be initiated from this remote machine.
E1-4 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NCDA Overview
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
TASK 3: INSTALL NETAPP SYSTEM MANAGER
In this task, you will install NetApp System Manager on your Windows Server machine.
STEP ACTION
1. On your assigned Windows Server machine, open Windows Explorer and navigate to C:\_files\ANCDA. You might have a shortcut on your desktop to facilitate this step.
Double-click system-manager-setup-1-1.exe. If prompted with a security warning, confirm by clicking Run.
The installation wizard should begin. Click Next to start the wizard.
2. On the license agreement, select the I Agree radio button, and then click Next.
3. Select the default installation location and click Everyone to ensure that any user on this machine
can run this program and click Next.
STEP ACTION
5. After the installation has completed, you should see a dialog window indicating that the install was
successful.
Click Close to close the installation dialog window.
6. The Launch System Manager window should appear.
Click Cancel so that NetApp System Manager does not launch.
7. Task complete.
E2-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Overview
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
MODULE 2: NFS OVERVIEW
EXERCISE
OVERVIEW
The goal of this exercise is to give you an opportunity to identify the current NFS exercise environment.
OBJECTIVES
By the end of this exercise, you should be able to: Identify the exercise environment
Log in to your assigned storage system
Log in to NetApp® System Manager and add your storage system
TIME ESTIMATE
EXERCISE 2: NFS OVERVIEW
The goal of this exercise is to give you an opportunity to identify the current NFS exercise environment with the assistance of your instructor.
TASK 1: IDENTIFY THE EXERCISE ENVIRONMENT
This task familiarizes you with the exercise environment you will use for all exercises in this course. NOTE: Your Windows® client was identified in the previous module.
STEP ACTION
1. With the assistance of your instructor, identify the following essential equipment:
STORAGE SYSTEM CONNECTION
Name: ______________________________
Internal IP address: __________________________ Terminal IP address: _________________________ Root Password: ____________________________
2. With the assistance of your instructor, identify the following essential equipment:
UNIX/LINUX CONNECTION
NOTE: This machine might be a virtual machine.
Name: _____________________________ IP address: __________________________ Root Password: ___________________________ 3. Task complete. Storage System UNIX/LUNIX Workstation
E2-3 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Overview
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
TASK 2: LOG IN TO YOUR ASSIGNED STORAGE SYSTEM
In this task, you will log in to your assigned storage system and enable SNMP control so NetApp System Manager can manage it.
STEP ACTION
1. Log in to the storage system that has been assigned to you.
Double-click the link to PuTTY on your Windows Server desktop.
Enter the IP address to your assigned storage system and select the Telnet radio button. You use either the NIC interface address or the console address and port if available. NOTE: If you use a NIC interface address, Data ONTAP® 8.0 7-Mode defaults to have SSH enabled. You might need to change the radio button to SSH if Telnet is disabled.
You might want to save this configuration for future use. Type a name in to the Saved Sessions text box and click the Save button.
To open a session with your storage system, click the Open button.
2. On the storage system, type:
system> options snmp
If SNMP is not enabled, enter the following to turn it on: system> options snmp.enable on
Verify it is enabled by entering the following: system> options snmp
TASK 3: LOG IN TO NETAPP SYSTEM MANAGER AND ADD YOUR STORAGE SYSTEM
In this task, you will set up NetApp System Manager to administer your assigned storage system.
STEP ACTION
1. On your remote Windows Server desktop, double click the NetApp System Manager desktop icon
found on your desktop.
NetApp System Manager should launch.
2.
Click the Add button to associate your storage system to NetApp System Manager.
E2-5 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Overview
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
3.
Your storage system should be added to NetApp System Manager. NOTE: you should
refer to the Data ONTAP 8.0 7-Mode Administration course for more details about
configuring your storage system with NetApp System Manager.
In the left pane of NetApp System Manager, expand the node that represents your storage
system by clicking the plus (+) icon next to the name.
Select the Storage node.
Your storage system is probably not configured yet for storage access. Click the Storage
Configuration Wizard link.
The Storage Configuration Wizard should start.
4.
We will manually configure storage in this class. Again, see the Data ONTAP 8.0 7-Mode
Administration course for more details.
Click Next to continue on with the wizard.
5.
On the Configure Aggregates page of the wizard, select Manually create aggregates.
Click Next.
6.
Click Finish to end the wizard.
7.
The Storage node should now have additional items. Click the plus (+) icon next to the
Storage node to expand and view the items available.
If you have never used NetApp System Manager, you might want to explore the items on
your own.
8. Task complete.
MODULE 3: NFS SETUP
EXERCISE
OVERVIEW
Setting up NFS services on a NetApp® storage system is easy. You will configure the NFS services in this exercise as well as allow your assigned UNIX or LINUX machine to be an admin host for your assigned storage system. This will allow your client host to have default access to your root volume’s configuration file.
OBJECTIVES
By the end of this exercise, you should be able to: License and configure NFS service
Add an admin host by way of the setup command
TIME ESTIMATE
E3-2 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Setup
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
EXERCISE 3: NFS SETUP
To set up a NetApp storage system for NFS traffic, you will have to license the storage system and verify the settings.
START OF EXERCISE
TASK 1: LICENSE AND CONFIGURE THE NFS SERVICE
In this task, you will license and verify the current configuration of the NFS service.
STEP ACTION
1. Open a PuTTY session to your storage system.
2. Check whether NFS is licensed on your system with the license command.
system> license
If NFS is not licensed, license the NFS protocol on your storage system.
system> license add XXXXXXX (obtain license code from your instructor)
3. Open up NetApp System Manager; notice that under the Configuration node and Licenses node that
the NFS license was added.
Other changes caused by adding the NFS license include: Storage > Shared Folders > Exports
Configuration > Protocols > NFS
4. From the Configuration > Protocols > NFS page within NetApp System Manager, select the Edit
button.
STEP ACTION
5. NOTE: The NFS versions are available from the Versions tab.
6. NOTE: View the Transport Protocols that are currently configured by selecting the
Transport Protocols tab.
7. NOTE: Other settings are available by selecting the Miscellaneous tab.
8. From the PuTTY sessions, verify the NFS protocol setting using the command-line interface:
system> options nfs
E3-4 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Setup
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
9. Determine which transport portal NFS is using:
system> options nfs.tcp
What is the status of NFS running over TCP? ________ system> options nfs.udp
What is the status of NFS running over UDP? ________
10. Determine the NFS version running:
system> options nfs.v3
What is the status of NFS running the v3 protocol? ________ system> options nfs.v4
What is the status of NFS running the v4 protocol? ________ What is the status of NFS running the v2 protocol? ________ How can you tell? ________
11. Task complete.
TASK 2: ADD AN ADMIN HOST BY WAY OF THE SETUP COMMAND
In this task, you will configure your storage system’s admin host setting with your assigned UNIX or LINUX host. This will allow your UNIX or LINUX host to mount the root volume of your storage system so that you can configure the storage system.
STEP ACTION
1. Establish a console connection to the storage system by way of the terminal server and execute the
setup command.
Enter the following highlighted information when prompted:
NOTE: Your output may differ depending on the hardware you are utilizing.
system> setup
The setup command will rewrite the /etc/rc, /etc/exports,
/etc/hosts, /etc/hosts.equiv, /etc/dgateways, /etc/nsswitch.conf, and /etc/resolv.conf files, saving the original contents of these files in .bak files (e.g. /etc/exports.bak).
Are you sure you want to continue? [yes] Enter Yes or Return to start the wizard.
STEP ACTION
2. Press Enter to accept the default value for the following questions:
Please enter the new hostname [system]:
Do you want to configure interface groups? [n]:
Please enter the IP address for Network Interface e0a [10.254.134.35]:
Please enter the netmask for Network Interface e0a [255.255.252.0]: Should interface e0a take over a partner IP address during
failover? [n]:
Please enter media type for e0a {100tx-fd, tp-fd, 100tx, tp, auto (10/100/1000)} [auto]:
Please enter flow control for e0a {none, receive, send, full} [full]:
Do you want e0a to support jumbo frames? [n]:
Please enter the IP address for Network Interface e0b []: Should interface e0b take over a partner IP address during failover? [n]:
Please enter the IP address for Network Interface e0c []: Should interface e0c take over a partner IP address during failover? [n]:
Please enter the IP address for Network Interface e0d []: Should interface e0d take over a partner IP address during failover? [n]:
Would you like to continue setup through the web interface? [n]: Please enter the name or IP address of the default gateway
[10.254.132.1]:
3. The admin host questions are next. Enter the name of your UNIX or LINUX machine and then enter
its primary IP address:
The administration host is given root access to the filer's /etc files for system administration. To allow /etc root access to all NFS clients enter RETURN below.
Please enter the name or IP address of the administration host:
LINUX_VM
E3-6 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: NFS Setup
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
4. Continue through the wizard by pressing Enter for the remainder of the questions:
Please enter timezone [GMT]:
Where is the filer located? [Classroom]: Do you want to run DNS resolver? [y]:
Please enter DNS domain name [development.netappu.com]: You may enter up to 3 nameservers
Please enter the IP address for first nameserver [216.240.23.25]: Do you want another nameserver? [y]:
Please enter the IP address for alternate nameserver [10.254.132.10]:
Do you want another nameserver? [n]: Do you want to run NIS client? [n]:
The Shelf Alternate Control Path Management process provides the ability to recover from certain SAS shelf module failures and provides a level of availability that is higher than systems not using the Alternate Control Path Management process.
Do you want to configure the Shelf Alternate Control Path Management interface for SAS shelves [n]:
5. Now, let’s reboot the storage system to make our changes take effect.
NOTE: Because we only added the admin host setting, we don’t really need to reboot. If this was a
production storage system, you might make the change take effect without rebooting by using the source command.
system> reboot
The setup command automatically updates the following files:
/etc/exports – allowing the admin host to mount the root volume. /etc/hosts.equiv – allowing the admin host to be trusted on the storage system (allows rsh commands).
/etc/hosts – allowing IP resolution of the admin host.
options admin.host – which displays the name of the admin host that was provided during the setup command. If volumes are automatically exported (a feature described later in the course), this setting determines “who” should receive access to the server-generated export.
We will now explore these changes.
6. After the reboot, log in to your storage system. What volumes exist on your storage system?
______________________
STEP ACTION
7. List the content of the /etc/exports file in the space provided:
HINT: There is a command-line interface command, but you might be able to do it another way.
If you issued a command-line interface command, what command did you run?_____________
How do you list what exports are presently in memory? __________________ Remember this file was populated during the storage system’s setup.
8. Record the IP address and hostname for each entry in the /etc/hosts file as follows:
Host1: IP Address:
9. List the content of the /etc/rc file in the space provided:
HINT: Again, there might be more than one way to accomplish this.
The /etc/rc file sets up interfaces and loads exports, as well as other configurations, during boot up of the storage system. You modify the /etc/rc file by running setup but you can modify it directly. The /etc/rc file is only executed at boot up. To execute any modification to the /etc/rc, use the source command.
system> source /etc/rc
This executed the /etc/rc file again.
To learn more about the source command, see the manual (man) page. system> man source
10. Task complete.
E4-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
MODULE 4: EXPORTS AND MOUNTS
EXERCISE
OVERVIEW
This lab allows you to practice what you learned in class regarding file sharing. You will create volumes, qtrees, and files. The volumes, qtrees, and files will be exported on the storage system and mounted to a mountpoint on the NFS client. It is assumed that you are familiar with the exportfs, mount, mkdir, and cd commands. If not, refer to the lecture notes during this lab exercise.
OBJECTIVES
By the end of this exercise, you should be able to:
Mount the root volume of the storage system on an admin host Export a volume using the command-line interface
Rename a volume and verify the automatic export Export and mount a qtree
Export to a subnet Export to a netgroup
Export a qtree using NetApp® System Manager Mount an export from an admin host
TIME ESTIMATE
EXERCISE 4: EXPORTS AND MOUNTS
In this exercise, you will create new resources, export them to various targets and mount them from an NFS client. START OF EXERCISE
TASK 1: MOUNT THE ROOT VOLUME OF THE STORAGE SYSTEM ON AN ADMIN HOST
In the previous exercise, you configured a UNIX or LINUX host as an admin host. Now, mount the root volume so you can modify configuration files from the admin host.
STEP ACTION
1. Launch NetApp System Manager and navigate to: Storage > Shared Folders > Exports
2. Notice that the root volume is exported by default just like you observed from the command-line
interface in the previous exercise.
2. Log in to your UNIX or LINUX machine with a PuTTY client.
NOTE: Your UNIX or LINUX machine might use SSH. Check with your instructor if you have any
questions.
3. Create a mountpoint using the name of your assigned storage system.
# mkdir /mnt/<system>
Replace <system > with the name of your storage system. Create a vol0 directory under /mnt/<system>:
E4-3 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
4. Mount /vol/vol0 to this mountpoint.
# mount <system>:/vol/vol0 /mnt/<system>/vol0
5. Change the directory to the mountpoint and list the contents. # cd /mnt/<system>/vol0
# ls –la
What are the contents of the directory? _____
6. Notice that under /mnt/<system >/vol0 there is an etc directory.
Is this the etc directory for your local UNIX host or your storage system?_________
There is also an etc directory under /. Is this the etc directory for your local host or your storage system? ____________
NOTE: It is easy to get them confused and to modify the wrong system. 7. Task complete.
TASK 2: EXPORT A VOLUME USING THE COMMAND-LINE INTERFACE
In this task, you will create a new aggregate and volume and verify the volume was exported automatically.
STEP ACTION
1. Examine the contents of the /etc/exports file with the rdfile command. system> rdfile /etc/exports
Compare the output from above with the output from using the exportfs command. system> exportfs
What is the difference between the outputs?
2. Create an aggregate and a flexible volume with the following commands:
The following command will create an aggregate with three disks with a single parity disk. system> aggr create aggr1 –t raid4 3
The following command will create a flexible volume called NFStest: system> vol create NFStest aggr1 10g
STEP ACTION
3. Verify the volume is created and exported using the
rdfile
andexportfs
commands:system> rdfile /etc/exports
Using the
exportfs
command, verify the volume is exported:system> exportfs
What option allows a newly created volume to be exported automatically? HINT: Look at system> options nfs
4. Note the access permission for the exported volume and record it here: 5. Task complete.
TASK 3: RENAME A VOLUME AND VERIFY THE AUTOMATIC EXPORT
In this task, you will rename a volume that was automatically exported and verify the export after the renaming operation. Then you will mount the newly renamed volume from a host.
STEP ACTION
1. At the storage system command-line interface, rename the volume from NFStest to NFSvol: system> vol rename NFStest NFSvol
2. At the storage system command-line interface, view the exported file systems:
system> exportfs
Notice that the /etc/exports file has been modified and that the exports have been automatically updated.
3. Create a mountpoint on the UNIX host and mount the volume:
# mkdir /mnt/<system>/NFSvol
# mount <system>:/vol/NFSvol /mnt/<system>/NFSvol Verify the mount operation:
# cd /mnt/<system>/NFSvol # ls
E4-5 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
TASK 4: EXPORT AND MOUNT A QTREE
In this task, you will create a qtree. You will then export it by editing the /etc/exports file and then reload the persisted exports. You will then mount the qtree export.
STEP ACTION
1. At the storage system command-line interface, use the
qtree create
command to create aqtree named unix_tree on NFSvol:
system> qtree create /vol/NFSvol/unix_tree
2. Verify that the security style is set to UNIX:
STEP ACTION
3. Let us now export this new qtree. Connect to your UNIX host and edit the /etc/exports file on the storage system.
Grant access to /vol/NFSvol/unix_tree by adding the following line:
/vol/NFSvol/unix_tree -rw=<UNIX/LINUX HOST>,root=<UNIX/LINUX HOST>
To edit the file, you can use vi. If you are not familiar with this technique, refer to the following: Verify your current location
# pwd
/mnt/system/vol0
If you are not here, within the vol0 mount point, change your directory to this location. Change directory into your assigned storage system’s etc directory.
# cd etc
Run vi on the exports file. # vi exports
Your exports file will now be available in the vi editor and the editor will be in command mode. Scroll down to the last line.
Type Shift-A, capital A, to append to the end of the line you are currently on. Enter Return to move to the next line.
Type in the following line: /vol/NFSvol/unix_tree -rw=<UNIX/LINUX
HOST>,root=<UNIX/LINUX HOST> replacing the <UNIX/LINUX HOST> with your
assigned UNIX/LINUX hostname or IP address.
Click the ESC button to move out of append mode and back to command mode. Enter :wq to write the file and quit vi.
Verify your changes using the cat command. # cat exports
...
/vol/NFSvol/unix_tree -rw=host1,root=host1
4. At the storage system command-line interface, run the following command to export the new entry to memory:
system> exportfs –a system> exportfs
E4-7 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
5. Create the following mountpoint on the UNIX host: # mkdir /mnt/<system>/unix_tree
6. Mount the new export:
# mount <system>:/vol/NFSvol/unix_tree /mnt/<system>/unix_tree Verify unix_tree is mounted from the storage system:
# mount
7. Change your current directory to the new mountpoint:
# cd /mnt/<system>/unix_tree # touch unix_file
Verify that you created a new file with the touch command: # ls –l
8. Task complete.
TASK 5: EXPORT TO A SUBNET
In this task, you will export a resource to a subnet.
STEP ACTION
1. Create the following qtree:
STEP ACTION
2. Export this qtree to the subnet. Use the subnet address of the current training environment in one of the following ways:
/vol/NFSvol/subnet -rw=<current_subnet>/24,root=<current_subnet>/24
or
/vol/NFSvol/subnet -rw=”<current_subnet>
<subnet_mask>”,root=”<current_subnet> <subnet_mask> NOTE: Use your assigned UNIX host’s IP address and the correct subnet mask.
For example: /vol/NFSvol/subnet -rw=10.10.10.0/24,root=10.10.10.0/24 or /vol/NFSvol/subnet -rw=”10.10.10.0 255.255.255.0”, root=”10.10.10.0 255.255.255.0
Export the file system after editing the /etc/exports file.
3. Mount the subnet qtree to the following location: /mnt/<system>/subnet # mkdir /mnt/<system>/subnet
# mount <system>:/vol/NFSvol/subnet /mnt/<system>/subnet
Change the directory to the mountpoint and create a file named subnet_file using the touch command.
E4-9 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
TASK 6: EXPORT TO A NETGROUP
In this task, you will identify targets and resources, create the /etc/netgroup file, create the /etc/nsswitch.conf file, and verify content of the /etc/rmtab and /etc/hosts files.
STEP ACTION
1. Verify the existence of the netgroup file from the host with the ls command or from the storage system with the rdfile command.
From the admin host:
# cd /mnt/<system>/vol0/etc # ls –l net*
# more netgroup From the storage system:
system> rdfile /etc/netgroup
Does the file exist? ________________________________________ If no, what error message did you receive? ______________________
STEP ACTION
2. Use a UNIX or LINUX host or the wrfile command to create three groups.
The groups are: trustedhosts, untrustedhosts, and allhosts. Add your assigned UNIX admin host to the trustedhost group and create other ‘dummy’ hosts for the untrustedhosts. Place the trustedhosts and untrustedhosts in the allhosts folder. See the WRFILE METHOD below for an example.
VI METHOD:
From the UNIX host:
# cd /mnt/<system>/vol0/etc # vi netgroup
Use the WRFILE METHOD for the correct data.
WRFILE METHOD
From the storage system command-line interface, use the wrfile command to create the netgroup file.
system> wrfile /etc/netgroup Enter the following netgroups:
trustedhosts (adminhost,,) (name_of_your_station,,) untrustedhosts (host1,,) (host2,,)
allhosts trustedhosts untrustedhosts
(Make sure to press Enter after the last line.) Press Ctrl-C to save entries
NOTE: Disregard the error message generated; this message will always appear.
CAUTION: Use the wrfile command sparingly. If available, use vi editor or other equivalent
commands instead.
Verify your entries with the rdfile command again: system> rdfile /etc/netgroup
NOTE: It may take up to 60 seconds for modifications of the netgroup file to take effect. 3. The rmtab file records a list of all the hosts mounted the storage system since boot up.
Check to see if the rmtab file exists and identify the contents of the file. # ls –l /mnt/<storage_system>/vol0/etc/rmtab # more /mnt/<storage_system>/vol0/etc/rmtab # more !$
Or, from the storage system:
E4-11 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
4. The nsswitch.conf file contains information on the order of the mechanism to resolve hostname-to-IP, passwords, netgroups, as well as other configurations.
Verify the existence of the nsswitch.conf file on the storage system: # ls –l /mnt/<system>/vol0/etc/nsswitch.conf # more !$
Or, from the storage system, use the rdfile command to verify the existence of the nsswitch.conf file:
system> rdfile /etc/nsswitch.conf
5. Using the rdfile command, view the contents of the /etc/hosts file: system> rdfile /etc/hosts
What is the output of this command?
____________________________________________________ ____________________________________________________ Make sure your assigned UNIX host is on the list.
6. Create a qtree in the NFSvol volume named netgroupA.
7. Export netgroupA to the trusted targets (the netgroup trustedhosts) with rw permissions.
8. Mount the netgroupA qtree to the following location /mnt/<system>/netgroupA (where <system> is the name of your storage system).
9. Change the directory to the mountpoint and create a file named netgroup_file. You have successfully exported a resource to a netgroup.
10. Task complete.
TASK 7: EXPORT A QTREE USING NETAPP SYSTEM MANAGER
In this task, you will export a qtree using NetApp System Manager and change the logical name of the export.
STEP ACTION
1. Using System Manager, create a qtree by navigating to Storage > Qtrees.
STEP ACTION
2. Add the following infromation to the Create Qtree window:
Name: readTree Volume: NFSVol
Enable oplocks: [unchecked] Securtiy Style: unix
Click the Create button to create the new qtree.
3. Now, let us create an export for this new qtree.
Click Storage > Shared Folders > Exports.
4. Click Create to start the Create Share and Export wizard.
Click Next.
5. Within the Shared Folder Location, click Browse and the Browse For Folder dialog should appear.
Expand aggr1 and the select NFSvol. Select the readTree folder.
Verify that the folder path to export is /vol/NFSvol/readTree and click OK.
6. Click Next in the Shared Folder Location.
The Share Protocols dialog appears.
NOTE: We only have NFS licensed currently, so only NFS exports are only available.
Change the Export Name to /readTree. Click Next.
E4-13 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: Exports and Mounts
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
7. In the NFS Permissions dialog, change the default permissions by selecting the current default and
clicking Edit.
Within Edit Host Permissions, change the permissions for All hosts to Allow Read-Only.
Click OK.
8. Verify the permissions.
Click Next.
9. Review the Share Summary dialog and click Next.
10. Click Finish to end the wizard.
11. Observe you new export under Storage > Shared Folders > Exports.
12. Task complete.
TASK 8: MOUNT AN EXPORT FROM AN ADMIN HOST
In this task, you will mount the export created earlier in this exercise.
STEP ACTION
1. Establish a PuTTY session to the admin host and create a directory for your storage system.
2. Create the readTree directory under the system_name directory:
STEP ACTION
3. Mount the storage system’s root volume to the directory you just created and view the contents.
When mounting the root volume, use the storage system name or IP address. # mount <IP_address>:/readTree /mnt/<system_name>/readTree
# cd /mnt/<system_name>/readTree
4. You should now be able to view the directory structure of your storage system’s root volume.
# ls –al /mnt/<system_name>/readTree How does this compare with the local clients root? (Hint # ls –al /)
_______________________________________________
5. Try to create a file at the root of the storage system:
# touch foo
Was it successful? ______________________
6. Task complete.
E5-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Overview
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
MODULE 5: CIFS OVERVIEW
EXERCISE
OVERVIEW
The goal of this exercise is to give you an opportunity to identify the current CIFS exercise environment.
OBJECTIVES
By the end of this exercise, you should be able to:
Identify the hardware available in your exercise configuration
TIME ESTIMATE
EXERCISE 5: CIFS OVERVIEW
The goal of this exercise is to give you an opportunity to identify the current CIFS exercise environment with the assistance of your instructor.
START OF EXERCISE
TASK 1: IDENTIFY THE EXERCISE ENVIRONMENT
This task familiarizes you with the exercise environment you will use for all exercises in this course.
STEP ACTION
1.
With the assistance of your instructor, identify the following essential equipment:Windows Server
NOTE: This machine might be a virtual machine.
ALSO NOTE: When login into the Windows Server, authenticate with the domain.
Name: ______________________________ IP address: _________________________ Domain Administrator Password: __________________________ Local Administrator Password: __________________________ Domain Controller Domain Name: _______________________ Controller IP address: _________________________ DNS: ____________________________ IP address: _________________________
E5-3 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Overview
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION Storage System Name: ___________________________________ Type: ___________________________________ Internal IP address: _______________________________ Terminal IP address: _______________________________ Root Password: _______________________________
2.
Task complete.
END OF EXERCISEMODULE 6: CIFS WORKGROUPS
EXERCISE
OVERVIEW
The goal of this lab is to give you an opportunity to configure a storage system for a Windows® workgroup environment. In a future exercise, you will repurpose the storage system for an Active Directory domain environment.
OBJECTIVES
By the end of this exercise, you should be able to:
Configure a storage system for a Windows workgroup environment
Review the results of cifs setup in a Windows workgroup environment
TIME ESTIMATE
E6-2 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Workgroups
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
EXERCISE 6: CIFS WORKGROUPS
Windows workgroup is a fast ad-hoc method of associating a group of machines. NetApp® storage systems can participate in this loose association of machines. In this exercise, you will configure your assigned storage system to work in a Windows workgroup environment using the command-line interface. We will use NetApp System Manager when we convert the workgroup configuration to an Active Directory domain.
START OF EXERCISE
TASK 1: CONFIGURE A STORAGE SYSTEM FOR A WINDOWS WORKGROUP ENVIRONMENT
In this task, you will log in to your assigned storage system and configure the CIFS services within Data ONTAP®.
STEP ACTION
1. Open a PuTTY interface to your assigned storage system.
2. Type license at the storage system’s command prompt to view the current list of licenses
registered.
License CIFS by entering the following command and using the CIFS license code provided by your instructor:
system> license add xxxxxx
Confirm the license was successfully added by reissuing the license command at the prompt.
3. Before configuring the CIFS services, at the storage system prompt (in your Telnet session), enter
the following command and view the default storage system security style and NT administrator privileges:
system> options wafl
Look at the wafl.default_security_style option.
What is the volume (and all qtrees on the volume) default security style?
______________
Look at the wafl.nt_admin_priv_map_to_root option. Does the NT (Windows) administrator have privileges to map to the UNIX root user? ___________________
4. Enter the following command and view the security style of the root volume:
system> qtree status
STEP ACTION
5. Configure the CIFS services by entering the following command:
system> cifs setup
NOTE: Steps 6 through 13 will assist you in entering the correct parameters.
6. Answer no [n] to WINS.
7. Configure the security style as (2) NTFS-only filer.
NOTE: Normally, if we use both NFS and CIFS on the same storage system you should select (1)
Multiprotocol, but we want to observe the resulting effect on the storage system.
8. Type in a root password and press Enter key. Repeat.
NOTE: By default, Data ONTAP 8.0 7-Mode requires a harden password. The root password must
be at least 8 characters, 2 alphabetic characters, and 1 number.
9. Press Enter to keep default CIFS server (storage system) name. (Obtain the storage system name
from your instructor.)
10. Choose 3 for Windows workgroup authentication using the storage system’s local user accounts.
11. Press Enter to keep the default name for the workgroup [WORKGROUP].
12. Answer yes [y] to create the local administrator (system\administrator) account.
13. Enter the password twice for the local administrator password.
NOTE: The name and password for the local administrator on the storage system must match the
E6-4 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Workgroups
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
14. CIFS should now be configured. Verify CIFS configuration using NetApp System Manager by
navigating to:
Configuration > Protocols > CIFS
15. After configuring the CIFS services, enter the following command and view the default storage
system security style and NT administrator privileges: system> options wafl
What is the volume (and all qtrees on the volume) default security style? ___________________
Does the NT (Windows) administrator have automatic privileges to map to the UNIX root user? _______________
16. Enter the following command and view the security style of the root volume:
system> qtree status
After configuring the CIFS services, what is the security style of your root volume? __________________
After configuring the CIFS services, what is the security style of your NFSvol volume? __________________
STEP ACTION
17. Change NFSvol back to a unix security style using the following command:
system> qtree security /vol/NFSvol unix
Verify:
system> qtree status
18. Task complete.
TASK 2: REVIEW THE RESULTS OF CIFS SETUP IN A WINDOW WORKGROUP ENVIRONMENT
In this task, you will review the files modified during the process of configuring the storage system’s CIFS server for a Windows Workgroup environment. All commands in the lab are entered at the storage system prompt.
STEP ACTION
1. At the storage system prompt, review the CIFS configuration file with the rdfile command by
typing:
system> rdfile /etc/cifsconfig_setup.cfg
Notice how this file holds all the configurations entered during the wizard questions of the cifs setup command.
2. At the storage system prompt, review the following files with the rdfile command:
/etc/usermap.cfg /etc/passwd
/etc/nsswitch.conf
E6-6 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Workgroups
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
3. As you recall, cifs setup created a local administrator. We will now verify this new user was
created.
system> useradmin user list administrator
Now, we will verify that this user was added to the lclgroups.cfg file under the BUILTIN\Administrators group.
system> rdfile /etc/lclgroups.cfg
Notice there is a SID under the BUILTIN\Administrators group. Because the lclgroups.cfg file is a newly created file, there should only be one SID. Now, let’s verify that this SID is the same as the administrator that we saw with the useradmin command:
system> cifs lookup {copy the SID here}
This SID should resolve to the storage system’s local administrator that was created with cifs setup.
4.
Task complete.
MODULE 7: CIFS SHARES AND SESSIONS
EXERCISE
OVERVIEW
The purpose of this activity is to perform routine CIFS administration procedures on your storage system in a Windows® Workgroup environment. You will view the current list of shares, add a new share, verify access to the share, and display session information.
OBJECTIVES
By the end of this exercise, you should be able to: View current shares
Create new shares using the command-line interface Verify shares access and display session information
TIME ESTIMATE
E7-2 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Shares and Sessions
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
EXERCISE 7: CIFS SHARES AND SESSIONS
Now that your storage system is configured for CIFS, you will view the default shares, add new shares, and access the shares.
START OF EXERCISE
TASK 1: VIEW CURRENT SHARES
In this task, you will log in to the storage system and work with the default shares.
STEP ACTION
1. If you are not already logged in, use the Remote Desktop connection to log in to your Windows
workstation as “Administrator.”
NOTE: Use the IP address and password provided by the instructor.
2. On your Windows workstation, go to StartRun. In the Run window, enter the following to
browse the shares on your storage system, and click OK: \\IP_Address_of _Your_Storage_System
What share(s) display? _________________________
3. In the address bar of the Web browser, change the address to the following:
\\IP_Address_of _Your_Storage_System\C$
What folder(s) display? __________________________
4. At your storage system prompt, view the CIFS sessions by entering the following command:
system> cifs sessions
What user currently has a session with the storage system? __________________________________________________ What account is the user mapped to? _______________________
STEP ACTION
5. At the storage system prompt, verify the user mapping by entering the following command:
system> options wafl.nt_admin_priv_map_to_root
Is this option set to “on”? _________________
If wafl.nt_admin_priv_map_to_root is on, then the local administrator’s user mapping is “root.”
Verify the default UNIX user name by entering the following command: system> options wafl.default_unix_user
Is there a default UNIX user? If yes, what is the user name? ________________________________
If the wafl.default_unix_user is set to a user name (for example, pcuser), then this is the default user mapping for any Windows user that is not explicitly mapped.
Verify that the default UNIX user name is in the /etc/passwd file by entering the following command:
system> rdfile /etc/passwd
Is the default UNIX user name in the /etc/passwd file? _____________
6. Task complete.
TASK 2: CREATE A NEW SHARE USING THE COMMAND-LINE INTERFACE
In this task, you will create a new share using the command-line interface.
STEP ACTION
1. At your storage system prompt, create a qtree named wintree in NFSvol:
system> qtree create /vol/NFSvol/wintree
Normally, a qtree created in NFSvol would be a unix security type because it would inherit the
security style from its containing volume. NOTE: We will discuss security styles in the next module. For now, change the security style to ntfs by entering:
system> qtree security /vol/NFSvol/wintree ntfs
2. Create a new share called winshare (for the qtree wintree) on the storage system by entering the
following command at the storage system prompt:
system> cifs shares –add winshare /vol/NFSvol/wintree Answer yes if you are asked whether you want to use this share name.
E7-4 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Shares and Sessions
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
3. View the newly created winshare share by entering the following command at the storage system
prompt:
system> cifs shares winshare
Which group has access to this share? _______________________ What are the share permissions? _______________________
4. Task complete.
TASK 3: VERIFY SHARE ACCESS AND DISPLAY SESSION INFORMATION
In this task, you access the new share that you created previously and check the session information.
STEP ACTION
1. On the Windows Server, open Windows Explorer and, as the administrator, map a network drive
to the new share winshare.
NOTE: Depending on the environment, you might want to create a share using the storage system’s IP address instead of the hostname.
2. After mapping the network drive to winshare in Windows Explorer:
a) Right-click the winshare share mapping and choose Properties. b)
Click the Security tab and view the NTFS file permissions.
3. On the Windows workstation, create a text file with WordPad and save the file to the new share
winshare.
a) Go to Start
>
Programs>
Accessories>
WordPad.b) Open WordPad and type something to create a text document. c) Save the file to the winshare share.
4. On the Windows workstation using Windows Explorer, go to the mapped network drive for the
winshare share to view the newly created text file: a) Right-click the text file and choose Properties.
b) Click the Security tab and view the NTFS file permissions for the text file. c) What group has access to this file? ____________________________ List the file access permissions for the text file:__________________ d) Close all the open windows.
STEP ACTION
5. At the storage system prompt, view the CIFS sessions by entering the following command:
system> cifs sessions
From your Windows workstation, who has a session with the storage system? __________________________________________________
6. Task complete.
E8-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Access Control
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
MODULE 8: CIFS ACCESS CONTROL
EXERCISE
OVERVIEW
The purpose of this activity is to perform routine CIFS administration procedures on your storage system in a Windows® workgroup environment. You will create a local user account and administer user access, add a new share, map a network drive to the new share and verify access to the share, and create a local group.
OBJECTIVES
By the end of this exercise, you should be able to:
Add a new local user account and configure user access Access a network drive and work with access control Create a local group
TIME ESTIMATE
EXERCISE 8: CIFS ACCESS CONTROL
Currently, the storage system’s CIFS service is configured in a Windows Workgroup mode. We will create a local user account and configure local access control.
START OF EXERCISE
TASK 1: ADD A NEW LOCAL USER ACCOUNT AND CONFIGURE USER ACCESS
In this task, you will create a local user account on your storage system. All commands in the lab are entered at the storage system prompt.
STEP ACTION
1. Verify that you have a PuTTY session with your assigned storage system.
2. Recall that the storage system currently is in a Windows workgroup. To verify that the storage
system is a server in a Windows workgroup, enter the following command: system> cifs sessions
Is the storage system in a Windows workgroup? ________________
3. Before adding a local user to the storage system, check the current security options to determine
password rules by entering the following command: system> options security
What is the value for the security.passwd.rules.enable? _________
If the security.passwd.rules.enable option is “on,” then in order to create a local user, you will need to come up with a password using the following rules:
It must be at least eight characters long
It must contain at least two alphabetic characters It must contain at least one digit
If security.passwd.rules.enable.option is “off,” then the restrictions will not be enforced when you create a password.
4. Add a local user (your name) in the predefined Guests group to the storage system by entering the
following command:
User names are case insensitive.
system> useradmin user add your_name –g Guests
Remember your password._________________________
5. Verify that the local user (you) was added to the storage system by entering the following
command:
system> useradmin user list your_name What are the capabilities of your new local user?
E8-3 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Access Control
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
6. Check the allowed capabilities for the local administrator account by entering the following
command:
system> useradmin user list administrator What are the capabilities of the local administrator?
_______________________________________________
7. View the list of all local storage system users by entering the following command:
system> useradmin user list
What local users are listed? _____________________________________
8. Task complete.
TASK 2: ACCESS A NETWORK DRIVE AND WORK WITH ACCESS CONTROL
In this task, you will map a network drive to a share. Recall that in a Windows workgroup, user authentication is performed locally on the storage system.
STEP ACTION
1. On your assigned Windows server, map a drive to a storage system share \\IP_Address_of
_Your_Storage_System\C$.
2. At the storage system prompt in your Telnet session, view the CIFS sessions by entering the
following command:
system> cifs sessions
Who has a session with the storage system?
__________________________________________________
You logged in to the Windows as “Administrator” with a password. This “Administrator” was authenticated locally on the storage system with the local Administrator account (note that the user names match). The local Administrator account has the same password as the Windows
Administrator.
This is called “pass-through” user authentication, and it works only if the names and passwords match on both the storage system and Windows workstation.
The Administrator account has permission to view the hidden C$ share.
3. On the Windows workstation, open Windows Explorer and disconnect all network drives attached
STEP ACTION
4. On the Windows workstation, log off as the Administrator and then log back in as the Administrator
to clear the share cache.
a) Go to Start > Log Off administrator… and click the Log off button when you are asked if you are sure that you want to log off.
b) Use the Remote Desktop connection to log back in to your Windows workstation as the Administrator with the Administrator password.
5. On your Windows workstation, map a drive to a storage system share for a different local user (your
name) by opening Windows Explorer and click Map network drive. The Map Network Drive window appears.
a) In the Drive list box, select any unused letter. b) In the Folder list box, enter the following:
\\IP_Address_of _Your_Storage_System\C$ c) Click Connect using a different credentials. d) Click Finish.
e) The Windows Security window appears. Enter your User name.
(Name_of _Your_Storage_System \your_name). f) Enter your Password. (password for your_name). g) Click the OK button.
h) Click the Finish button.
i) The Connect to …window appears. j) The user name matches
Name_of _Your_Storage_System \your_name. k) In the password text box, enter your password. l) Click the OK button.
Are you able to connect to C$ share? _____________________
If not, go to Step 5 b), and in the Folder list box, enter \\IP_Address_of
_Your_Storage_System\Home and proceed again to map the network drive to the share.
The Guests group has no capabilities and, therefore, you cannot access the C$ share, but you can access the Home share because it is available to the Everyone
E8-5 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Access Control
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
STEP ACTION
6. At the storage system prompt, view the CIFS sessions by entering the following command:
system> cifs sessions
From your Windows workstation, who has a session with the storage system? __________________________________________________
7.
Task complete.
TASK 3: CREATE A LOCAL GROUP
In this task, you will create a new local group on your storage system.
STEP ACTION
1. Before creating a new local group on your storage system, view the current groups on the storage
system by entering the following command at the storage system prompt: system> useradmin group list
2. At the storage system prompt, create a local group on the storage system called “friends” with the
Data ONTAP® predefined role “power” by entering the following command: system> useradmin group add friends –r power
3. At the storage system prompt, verify the newly created group by entering the following command:
system> useradmin group list friends
How many capabilities are assigned to the “power” role for the friends group? __________________________
STEP ACTION
4. On the Windows workstation, change the security properties of the text file on the winshare share.
a) Open Windows Explorer and go to the mapped winshare drive to view the text file. b) Right-click the text file and choose Properties.
c) Select the Security tab and under Group or user names, click Edit and then click the Add button.
d) In the Enter the object names to select text box, enter friends. e) Click the OK button.
f) Click the friends group. What permissions are displayed for the friends group? _____________________________
g) Click the Everyone group. How do the friends permissions differ from the permissions in the Everyone group? ___________________________________________________ h) Now, click the Apply button on the Security tab, and then click the OK button. Click the
OK button.
5. At the storage system prompt, modify the local user (your name) and add the friends group to the
user by entering the following command:
system> useradmin user modify your_name –g Guests,friends
6. At the storage system prompt, verify the groups and capabilities of the newly changed local user
(your name) by entering the following command: system> useradmin user list your_name
To which groups does the local user (your name) now belong?________________ Have the local user (your name) capabilities changed? If yes, how?
________________________________________________
7. Task complete.
E9-1 Accelerated NCDA Boot Camp Data ONTAP 8.0 7-Mode: CIFS Domains
© 2010 NetApp, Inc. This material is intended for training use only. Not authorized for reproduction purposes.
MODULE 9: CIFS DOMAINS
EXERCISE
OVERVIEW
The purpose of this activity is to reconfigure the storage system’s CIFS server for an Active Directory environment. You will then create a domain user, create shares, and administrate those shares.
OBJECTIVES
By the end of this exercise, you should be able to:
Terminate CIFS services using NetApp® System Manager Configure DNS using NetApp System Manager
Configure the time services using NetApp System Manager Reconfigure the CIFS services using NetApp System Manager Create a 32-bit aggregate using NetApp System Manager Create a volume using NetApp System Manager
Create shares and manage the permissions of the shares Create a domain user
Create a share with Computer Management Map shares to drive letters
Display CIFS sessions
TIME ESTIMATE