Preparing for CIFS Authentication
Authorizing Windows-Management (MMC) Access
3-30 CLI Storage-Management Guide
All users in the management-authorization group have the permissions you set with
this command. By default, all group members can browse all directories in the
namespace, but cannot add or delete CIFS shares. Also, they cannot view or change
CIFS-client sessions or open files. From gbl-mgmt-auth mode, use the
permit
command to enter one permission setting for the current management-authorization
group:
permit {share | session | open-file | all} {monitor | any}
where
share | session | open-file | all chooses one type of object (or all of them),
and
monitor | any chooses the permissions. The any flag allows group members
to read and write the object(s); for example, share any means that group
members can view, add, and delete CIFS shares from the namespace.
Re-use the command to enter more permission settings for this group.
For example, the following command sequence permits the “readOnly” group to view
(but not edit) CIFS shares and client sessions, then permits the group to view and/or
close open files:
bstnA6k(gbl)# windows-mgmt-auth readOnly
bstnA6k(gbl-mgmt-auth[readOnly])# permit share monitor
bstnA6k(gbl-mgmt-auth[readOnly])# permit session monitor
bstnA6k(gbl-mgmt-auth[readOnly])# permit open-file any
bstnA6k(gbl-mgmt-auth[readOnly])# ...
Removing a Permission
You can remove access permissions for any or all of the CIFS objects (shares, client
sessions, and/or open files). Use the
no permit command to remove permissions from
the current management-authorization group:
no permit {share | session | open-file | all}
where share | session | open-file | all chooses one type of object (or all of them).
For example, the following command sequence removes all open-file permissions
from the “readOnly” group:
Comentarios a estos manuales