CIFS share is inaccessible due to no ACEs on the CIFS share
Applies to
- ONTAP 9
- CIFS
Issue
- Windows Users get permission denied to access CIFS share, and even the local administrator user cannot access
- Security trace displays access denied on the root volume
::> vserver security trace trace-result show -vserver svm1Vserver: svm1 Node Index Filter Details Reason--------------- ----- -------------------------- ------------------------------node1 1 Security Style: NTFS and Access is denied. The NT ACL requested permissions are not granted by the ACE while opening existing file or directory. Access is not granted for: "Read Attributes", "Read" Share: share1 Path: / Win-User: NTAP\Admin UNIX-User: root Session-ID: 7694399963362498338- File-level permission shows no ACEs on the volume.
::> vserver security file-directory show -vserver svm1 -path /vol1 Vserver: svm1 File Path: /vol1 File Inode Number: 64 Security Style: ntfs Effective Style: ntfs DOS Attributes: 10DOS Attributes in Text: ----D---Expanded Dos Attributes: - UNIX User Id: 0 UNIX Group Id: 0 UNIX Mode Bits: 0UNIX Mode Bits in Text: --------- ACLs: NTFS Security Descriptor Control:0x9504 Owner:NTAP\Admin Group:BUILTIN\Administrators- CIFS share-level allows everyone to access
