CIFS share is inaccessible due to no ACEs on the CIFS share
Applies to
- ONTAP 9
- CIFS
Issue
- Windows Users get permission denied to access CIFS share, and even the local administrator user cannot access
- Security trace displays access denied on the root volume
::> vserver security trace trace-result show -vserver svm1
Vserver: svm1
Node Index Filter Details Reason
--------------- ----- -------------------------- ------------------------------
node1 1 Security Style: NTFS and Access is denied. The
NT ACL requested permissions are not
granted by the ACE while
opening existing file or
directory. Access is not
granted for: "Read Attributes", "Read"
Share: share1
Path: /
Win-User: NTAP\Admin
UNIX-User: root
Session-ID: 7694399963362498338
- File-level permission shows no ACEs on the volume.
::> vserver security file-directory show -vserver svm1 -path /vol1
Vserver: svm1
File Path: /vol1
File Inode Number: 64
Security Style: ntfs
Effective Style: ntfs
DOS Attributes: 10
DOS Attributes in Text: ----D---
Expanded Dos Attributes: -
UNIX User Id: 0
UNIX Group Id: 0
UNIX Mode Bits: 0
UNIX Mode Bits in Text: ---------
ACLs: NTFS Security Descriptor
Control:0x9504
Owner:NTAP\Admin
Group:BUILTIN\Administrators
- CIFS share-level allows everyone to access