QuestionQ12

Introduction to CIFS in Clustered Data ONTAP

Test user LAB\tester can perform an operation on the CIFS share HR from SVM svm1. However, the other users in the HR department cannot perform that same operation. You want to find out why only LAB\tester can perform it.

In this scenario, which security trace filter fulfills this task?

  • A vserver security trace filter create -vserver svm1 -index 1 -protocol nfs -unix-name tester -trace-allow no
  • B vserver security trace filter create -vserver svm1 -index 1 -protocol cifs -windows- name LAB\tester -trace-allow no
  • C vserver security trace filter create -vserver svm1 -index 1 -protocol cifs -windows- name LAB\tester -trace-allow yes
  • D vserver security trace filter create -vserver svm1 -index 1 -protocol nfs -unix-name tester -trace-allow yes
Explanation

A CIFS security trace filter must identify the Windows user with -windows-name and use the CIFS protocol. Setting -trace-allow yes includes successful access events, allowing the trace to capture the operation that LAB\tester can perform; denied events are traced by default.

Learn more

Community Discussion

No comments yet. Be the first to start the discussion!