Skip to main content

NetApp_Insight_2020.png 

NetApp Knowledgebase

Are local users and groups and Workgroup mode supported in clustered Data ONTAP?

Views:
104
Visibility:
Public
Votes:
0
Category:
data-ontap-8
Specialty:
nas
Last Updated:

 

Applies to

 Clustered Data ONTAP 8.2 

Answer

Are local users and groups and Workgroup mode supported in clustered Data ONTAP?

Workgroup mode is a standard feature in Windows that allows a workstation to operate without an Active Directory Domain, it is the ability to authenticate and serve data without DC interaction. Support for Workgroup mode was missing for older versions of Clustered ONTAP, but it has been added as of ONTAP9 and later. This feature is crucial in situations like:

  • When customers do not want a Microsoft domain infrastructure
  • When customers are prevented from using a Microsoft domain by regulation policies

Local users and groups(LUG) is the ability to create user accounts that are local to Vserver. Authentication and Authorization could be done using the local users and groups usually in extreme situation like when no Domain Controllers are available. LUG has been added since Clustered ONTAP 8.2 and later.
Note: LUG is just a prerequisite for Workgroup mode. Even with LUG support in Clustered ONTAP 8.2.x or 8.3.x, CIFS still can’t run in Workgroup mode, in other words, an Active Directory Domain is still a must for CIFS Vserver creation. This restriction has been removed since ONTAP9 with the complete support for Workgroup mode.
 
[Clustered Data ONTAP 8.2.x/8.3.x]
How to enable LUG in Clustered ONTAP 8.2.x & 8.3.x?
Enabling or disabling local users and groups:
Cluster::>vserver cifs options modify -vserver vserver_name -is-local-users-and-groups-enabled true/false
Enabling or disabling local user authentication:
Cluster::>vserver cifs options modify -vserver vserver_name -is-local-auth-enabled true/false
[ONTAP 9 and later]
How to create a new CIFS server configured for Workgroup mode?
Cluster::>vserver cifs create -vserver vserver_name -cifs-server cifs_server_name -workgroup workgroup_name
 
How to move a CIFS server from a domain to a workgroup?
Cluster::>vserver cifs modify -vserver vserver_name -cifs-server cifs_server_name -status-admin down -workgroup workgroup_name 
How to move a CIFS server from a workgroup to a domain?
Cluster::>vserver cifs modify -vserver vserver_name -cifs-server cifs_server_name -status-admin down -domain domain_name

Additional Information

Add your text here.