Skip to main content
Effective December 3 - NetApp adopts Microsoft’s Business-to-Customer (B2C) identity management to simplify and provide secure access to NetApp resources. For accounts that did not pre-register (prior to Dec 3) access to your NetApp data may take up to 1 hour as your legacy NSS ID is synchronized to the new B2C identity. To learn more, Read the FAQ and Watch the video.
NetApp Knowledge Base

How to troubleshoot NFS access to an NTFS security style volume/qtree in clustered ONTAP 8.2

Last Updated:

Applies to

Clustered Data ONTAP 8.2


The following document is intended to be used as a guide for troubleshooting NFS access to NTFS security style volumes (or qtrees).

Before starting, it is important to have some basic configuration information about the environment, this will allow us to check the configuration of all items involved in the access process.

  • Vserver name
  • Volume name
  • The name of the LIF that is being used to access the volume

Once this information is known, collect the following information. Examples are as follows:

::> vol show -vserver vs1 -volume voltest -fields policy,unix-permissions,junction-path,junction-parent,security-style,type
vserver volume  type policy  security-style unix-permissions junction-path junction-parent
------- ------- ---- ------- -------------- ---------------- ------------- ---------------
vs1     voltest RW   default ntfs           ---rwxr-xr-x     /voltest      vs1_root

Run the command again, this time specifying the junction-parent as the volume.
::> volume show -vserver vs1 -volume vs1_root -fields policy,unix-permissions,junction-path,junction-parent,security-style,type
vserver volume   type policy  security-style unix-permissions junction-path junction-parent
------- -------- ---- ------- -------------- ---------------- ------------- ---------------
vs1     vs1_ro   RW   default ntfs           ---rwxr-xr-x     /             -

::> export-policy rule show -vserver vs1 -policyname default -instance

Determine which node the interface is on for the volume you are accessing. If you do not know the LIF information, use the -address option.
::> net int show -address
The node on which the LIF is on should be used when the node name is requested in the following commands.



Registered NetApp customers get unlimited access to our dynamic Knowledge Base.

New authoritative content is published and updated each day by our team of experts.

Current Customer or Partner?

Sign In for unlimited access

New to NetApp?

Learn more about our award-winning Support