Skip to main content
NetApp Knowledge Base

CIFS share is visible but not accessible when export policy for CIFS is enabled

  1. Last updated
  2. Save as PDF
Views:
1,514
Visibility:
Public
Votes:
2
Category:
ontap-9
Specialty:
nas
Last Updated:

Applies to

  • ONTAP 9
  • CIFS

Issue

  • When attempting to navigate into a share, a credential prompt appears and reports Access is denied when credentials are entered
  • Attempting to access the root of the CIFS server is initially successful
    • i.e. when File Explorer navigates to the LIF IP address, all the CIFS shares are listed
  • CIFS export policies are enabled:

::> set -privilege advanced
::*> vserver cifs options show -vserver <SVM_name> -fields is-exportpolicy-enabled

  • Identify the policy and the index of the rule blocking access:

::> vserver export-policy check-access -vserver <SVM_name> -volume <Volume_name> -client-ip <Client_IP> -protocol  cifs -access-type read-write -authentication-method [krb5|ntlm]

  • The client IP address is not present in the export rules assigned to the volume/qtree.
  • In a packet trace, you will see the server returning ACCESS_DENIED in the Tree Connect Response.

 

Sign in to view the entire content of this KB article.

New to NetApp?

Learn more about our award-winning Support

NetApp provides no representations or warranties regarding the accuracy or reliability or serviceability of any information or recommendations provided in this publication or with respect to any results that may be obtained by the use of the information or observance of any recommendations provided herein. The information in this document is distributed AS IS and the use of this information or the implementation of any recommendations or techniques herein is a customer's responsibility and depends on the customer's ability to evaluate and integrate them into the customer's operational environment. This document and the information contained herein may be used solely in connection with the NetApp products discussed in this document.