How to convert a CIFS SVM from a domain membership to workgroup
Applies to
- ONTAP 9
- CIFS / SMB
- CIFS server Authentication style set to domain
Answer
1. Review the current Authentication Style configured on the SVM and CIFS shares present:cluster1::> vserver cifs show
Server Status Domain/Workgroup Authentication
Vserver Name Admin Name Style
----------- --------------- --------- ---------------- --------------
svm1 SVM1 up demo.netapp.com domain <<<
| Caution: Review the warning below closely before confirming the operation with "y" key. |
2. Modify the SVM CIFS configuration:
cluster1::> vserver cifs modify -vserver svm1 -status-admin down -workgroup WORKGROUP
Warning: To enter workgroup mode, all domain-based features must be disabled
and their configuration removed automatically by the system, including
continuously-available shares and shadow copies. However,
domain-configured share ACLs such as "DEMO.NETAPP.COM\userName" will
not work properly, but cannot be removed by Data ONTAP. Remove these
share ACLs as soon as possible using external tools after the command
completes.
Do you want to continue? {y|n}: y
3. Confirm Authentication Style has now changed to workgroup:
cluster1::> vserver cifs show
Server Status Domain/Workgroup Authentication
Vserver Name Admin Name Style
----------- --------------- --------- ---------------- --------------
svm1 SVM1 up WORKGROUP workgroup <<<
4. Create local user on the SVM for CIFS access:
cluster1::> cifs users-and-groups local-user create -user-name user1 -is-account-disabled false -vserver svm1
Enter the password:
Confirm the password:
5. Confirm local user creation:
cluster1::> cifs users-and-groups local-user show
Vserver User Name Full Name Description
------------ --------------------------- -------------------- -------------
svm1 SVM1\Administrator Built-in administrator account
svm1 SVM1\User1 - -
2 entries were displayed.
Additional Information
How to convert a CIFS SVM from workgroup to domain membership