Asset ID:	1-71-1008490.1
Update Date:	2009-05-28
Keywords:

---

Solution Type  Technical Instruction Sure

Solution  1008490.1 :   Sun StorageTek[TM] 5000 Series NAS: Accessing and Configuring Administrative CIFS Shares  


PreviouslyPublishedAs
211609

Description
Sun StorageTek[TM] 5000 Series NAS: Administrative shares are hidden CIFS shares that are automatically created for each volume on the NAS. This includes any volumes created on the storage, the system volumes /cvol and /dvol, and any checkpoint volumes. These shares are provided for compatibility with rmtshare and Server Manager.


Steps to Follow
For each of the volume types listed above, drive letters are automatically assigned by the NAS. Drives C and D will always be assigned to cvol and dvol, this cannot be changed, Drive letters from E onward will be assigned in alphabetical order as volumes are created, including checkpoint volumes. These drive letters can be managed in the telnet/ssh menu, under option "C". The concept of drive letters is not native to the NAS, these are assigned and shared purely for Windows compatibility, as not
Shares are created for each of these assigned drive letters, with the name X$, where X is the drive letter. If the NAS IP address was 1.2.3.4, then /cvol could be accessed remotely from a CIFS client by running \\1.2.3.4\c$ with the proper credentials.

The NAS can be configured in either Windows Domain mode or Workgroup mode. If the NAS is in Windows Domain mode, only members of the Domain Admins group have access to these shares.

If the NAS is configured in Workgroup mode, there is no access to the admin shares by default. This is the recommended setting. However, some environments have a requirement for rmtshare or need the admin shares for other reasons. In this case, follow the instructions below to enable Administrative Shares (and therefore rmtshare and Server Manager) for these environments.

Note - This is extremely insecure and not recommended for any environment that requires CIFS/SMB security. It allows unrestricted access to all data on the NAS for any user who is aware of the hidden shares.

To permit Access to Administrative Shares in Workgroup Mode:

1. Connect to the NAS with telnet or ssh.
2. At the CLI, enter set srvsvc.netshare.enable yes .
3. To save this setting to persist through reboots, type savevars at the CLI, otherwise, the setting will be active only until the next reboot.

To reverse the setting, enter unset srvsvc.netshare.enable, then enter savevars, then reboot the server.

Product
Sun StorageTek 5320 NAS Gateway/Cluster System
Sun StorageTek 5320 NAS Appliance
Sun StorageTek 5320
Sun StorageTek 5310 NAS Gateway/Cluster System
Sun StorageTek 5310 NAS Gateway System
Sun StorageTek 5310 NAS Appliance
Sun StorageTek 5220 NAS Appliance
Sun StorageTek 5220
Sun StorageTek 5210 NAS Appliance

Internal Comments
This document contains normalized content and is managed by the the Domain Lead(s) of the respective domains. To notify content owners of a knowledge gap contained in this document, and/or prior to updating this document, please contact the domain engineers that are managing this document via the “Document Feedback” alias(es) listed below:

storage-nas-domain@sun.com


The Knowledge Work Queue for this article is KNO-STO-NAS
NAS, CIFS, rmtshare, Server Manager, workgroup, security, Audited
Previously Published As
90646

Change History
Date: 2007-09-19
User Name: 71396
Action: Approved
Comment: PErformed final review of article.
Updated trademarking.
Publishing.
Version: 2
Date: 2007-09-19
User Name: 71396
Action: Accept
Comment:
Version: 0
Date: 2007-09-19
User Name: 119902
Action: Approved
Comment: I have reviewed this document for technical accuracy
Version: 0

Attachments

This solution has no attachment