Create an SMB share to provide clients with access to files on the server. You can create one or more SMB shares.
- Go to Provisioning > File Services > SMB Shares.
- In the SMB Shares pane, click Create Share.
- In the Create SMB Share wizard, complete the following configuration information, and then click Next. For more information about the configuration settings, see Additional information about creating an SMB share.
- Select the EVS and associated file system or cluster namespace to which the SMB share will provide access.
- Enter the SMB share name.
Enter optional additional information for the SMB share in the Comment box. The comment should be meaningful to you and other users.
- In the Path box, enter the directory path on the file system that you want to share. To locate an existing directory, click Browse.
To automatically create the path, select the Create path if it does not exist.
- Enter the maximum number of users who can access the share simultaneously. By default, a share has unlimited access.
This setting limits the number of users that can access a share. It does not provide security restrictions.
- Select an option from Show Snapshots list to show or hide snapshots.
- Select a value from the Cache Options list to alter the caching option (Offline Files Access).
- Select an option from the Transfer to Object Replication Target list to make the SMB share transferable.
- Enter the IP addresses of the clients who can access the share in the Access Configuration box. To secure and control access to the share, follow the guidelines in Guidelines for entering values in the Access Configuration box when specifying the IP addresses.
- Enable the following configuration options based on your requirements: Follow Symbolic Links, Follow Global Symbolic Links, Force File name to be Lowercase, Enable ABE, Enable Virus Scanning, and Ensure Share Continuously Available.
- On the User Mapping page, complete the following information, and then click Next.
- Select one of the following modes for creating individual user home directories:
- ADS: Creates user home directories using the information provided by the Active Directory server. If selecting this option, do not specify a Path.
- Off: Disables automatic creation of home directories for users on the share. This is the default option.
- Unix: Create the home directory by converting the user's UNIX username to lowercase.
- User: Creates the home directory by converting the user's Windows username to lowercase. The Windows domain name associated with the user is ignored in this process. For example, if a user is DOMAIN\John Smith, the home directory is created as john_smith.
- Domain and User: Creates the home directory by generating a directory named according to the user's Windows domain name. Following this, the Windows username of the user is converted to lowercase, creating a sub-directory under that name. For example, if a user is DOMAIN\John Smith, the home directory is created as domain\john_smith.
- Enter the path for creating home directories.
Home directories for each user are created in the specified Path relative to the share root. The share root must be specified without a leading backslash(\). If this box is left blank, the user home directories are created directly in the share root.
By default, only one share per file system can be configured for home directories. The smb-home-directory command can be used to relax this restriction. However, it's important to avoid configuring conflicting home directories.
For example, there will be no conflict between a share using the path \home1 and another share using the path \home2 regardless of the configured home directory paths. If a share is set with the path \ along with a default home directory path, it can clash with a share using the path \dir and a default home directory path.
- Select one of the following modes for creating individual user home directories:
- On the User Permissions page, assign the access permissions to individual users and groups within the SMB share, and then click Next.
If you select FullControl for Allow, the user or group can perform all actions. By default, a share has full access.
If you do not want to set user permissions, click Skip.
- If the Path Permissions page is provided, set access control at the user and group level for the directory entered on the Configurations page, and then click Next.
This page appears only if the user is logged into File Administrator as a user assigned to one of the following roles:
- allow_access_to_fs_path_info
- allow_access_to_fs_path_info_read_only
For information about assigning user roles, see the Hitachi Virtual Storage Platform One File Installation and Configuration Guide.
Configuring access control for the directory provides granular access by users and groups to prevent root-level unrestricted access. You can define access per user and group and specify allowed operations (read, write, modify, and delete).
If you do not want to set access control for the directory path, click Skip
In the Share Path and Security pane, the directory path and security mode is shown. The available modes are Mixed and Unix. The security mode is inherited from the underlying EVS or the file system on which the virtual volume is created. The access control configuration of the directory path varies based on the security mode. For example, if the security mode is Mixed, both Windows and UNIX rules apply.
To set the directory path permissions:
- If the security mode is Mixed, complete the following information:
- In the Path Permissions pane, set the owner and the primary group for the directory path. You can accept the default values or you can change them. For example, if you chose Create path if it does not exist on the Configurations page and require different values for the new path.
- In the Permission Details pane, click Add Path Permission to create a permission.
- Enter a name for the permission and specify the inheritance type.
- Set the permissions to Allow or Deny.
- Click Add Permission. To cancel, click Discard.
- (Optional) To edit a permission, click the edit icon. To delete a permission, click the delete icon.
- If the security mode is Unix, complete the following information:
- In the Path Permissions pane, set the owner and the primary group for the directory path. You can accept the default values or you can change them. For example, if you chose Create path if it does not exist on the Configurations page and require different values for the new path.
The read-only mode value is dependent on the octal permissions that are set for Owner Rights, Group Rights, and Other Rights.
- Click the edit icon for each permission to configure the rights, and then click Save Changes. To cancel, click Discard.
- In the Path Permissions pane, set the owner and the primary group for the directory path. You can accept the default values or you can change them. For example, if you chose Create path if it does not exist on the Configurations page and require different values for the new path.
- On the Summary page, review the share configurations, and then click Create. Alternatively, you can add another share by clicking Create and add another.