ONTAP 9.12.1 commands

50←PDF
  • ONTAP 9.12.1 commands(CA08871-263en.pdf)
  • vserver cifs modify

    Modify a CIFS server

    Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

    Description

    The vserver cifs modify command modifies the site within the Active Directory domain to associate with the CIFS server if Data ONTAP cannot determine an appropriate site. You also can modify the name and ou of the CIFS server, join to a new domain or a workgroup, or rejoin to current domain. When a CIFS server is joining a domain, this command might take several minutes to complete.

    Parameters

    -vserver <vserver name> - Vserver

    This parameter specifies the Vserver for the CIFS server whose associated site you want to modify.

    [-cifs-server <NetBIOS>] - CIFS Server NetBIOS Name

    This parameter specifies the name of the CIFS server (up to 15 characters). Before setting this parameter, the CIFS server must be stopped using the vserver cifs modify-status-admin`down command. When the command completes successfully, the administrative status of the CIFS server is automatically set to up` .

    { [-domain <TextNoCase>] - Fully Qualified Domain Name

    This parameter specifies the fully qualified name of the Active Directory domain to associate with the CIFS server. Before setting this parameter, the CIFS server must be stopped using the vserver cifs modify-status-admin`down command. When the command completes successfully, the administrative status of the CIFS server is automatically set to up` .

    [-ou <text>] - Organizational Unit

    This parameter specifies the organization unit within the Active Directory domain to associate with the CIFS server. By default, this parameter is set to CN=Computers. Before setting this parameter, the CIFS server must be stopped using the vserver cifs modify-status-admin`down command. When the command completes successfully, the administrative status of the CIFS server is automatically set to up` . Modifications to this parameter are not supported for workgroup CIFS servers.

    [-default-site <text>] - Default Site Used by LIFs Without Site Membership

    This parameter specifies the site within the Active Directory domain to associate with the CIFS server if Data ONTAP cannot determine an appropriate site. Modifications to this parameter are not supported for workgroup CIFS servers.

    | [-workgroup <NetBIOS>] - Workgroup Name }

    This parameter specifies the name of the workgroup (up to 15 characters).

    [-keytab-uri {(ftp|http|https)://(hostname|IPv4 Address|'['IPv6 Address']')…​}] - Kerberos Keytab File URI

    This parameter specifies loading a keytab file from the specified URI. This is applicabe if the CIFS server is being created in realm mode or domain mode.

    [-status-admin {down|up}] - CIFS Server Administrative Status

    Use this parameter to modify the administrative status of the cifs server. Modify the administrator status to down to stop cifs access.

    [-comment <text>] - CIFS Server Description

    Use this parameter to modify the comment of the server.

    Examples

    The following example changes the default site and administrative status of the CIFS server associated with Vserver "vs1":

    cluster1::> vserver cifs modify -vserver vs1 -default-site default -status-admin up

    The following example modifies the Active Directory domain and ou for the CIFS server associated with Vserver "vs1". The administrative status of the CIFS server must be set to "down" to proceed with Active Directory domain modification. If the command completes successfully, the administrative status is automatically set to "up".

    cluster1::> vserver cifs modify -vserver vs1 -domain example.com -ou ou=example_ou -cifs-server example -status-admin down
    
    In order to create an Active Directory machine account for the CIFS server, you
    must supply the name and password of a Windows account with sufficient
    privileges to add computers to the "ou=example_ou" container within the "example.com"
    domain.
    
    Enter the user name: administrator
    
    Enter the password:
    
    cluster1::>

    The following example modifies the CIFS server associated with Vserver "vs1" from a domain to a workgroup. The administrative status of the CIFS server must be set to "down" for this command. If the command completes successfully, the administrative status is automatically set to "up".

    cluster1::> vserver cifs modify -vserver vs1 -workgroup Sales -status-admin down
    
    Warning: To enter workgroup mode, all domain-based features must be disabled
             and their configuration removed automatically by the system,
             including continuously-available shares, shadow copies, and AES.
             However, domain-configured share ACLs such as
             "EXAMPLE.COM\userName" will not work properly, but cannot be
             removed by Data ONTAP. Remove these share ACLs as soon as possible
             using external tools after the command completes. If AES is enabled,
             you may be asked to supply the name and password of a Windows account
             with sufficient privileges to disable it in the "EXAMPLE.COM" domain.
    Do you want to continue? {y|n}: y
    
    cluster1::>

    The following example modifies the CIFS server associated with Vserver "vs1" from a workgroup to a domain. The administrative status of the CIFS server must be set to "down" for this command. If the command completes successfully, the administrative status is automatically set to "up".

    cluster1::> vserver cifs modify -vserver vs1 -domain example.com -status-admin down
    
    In order to create an Active Directory machine account for the CIFS server, you
    must supply the name and password of a Windows account with sufficient
    privileges to add computers to the "ou=example_ou" container within the "example.com"
    domain.
    
    Enter the user name: administrator
    
    Enter the password:
    
    cluster1::>

    The following example modifies the CIFS server associated with Vserver "vs1" from a workgroup to a domain using keytab-uri. The administrative status of the CIFS server must be set to "down" for this command. If the command completes successfully, the administrative status is automatically set to "up".

    cluster1::> vserver cifs modify -vserver vs1 -domain example.com -keytab-uri http://nbsweb.eng.btc.netapp.in/~shravanp/Sample1.keytab -status-admin down
    
    cluster1::>

    The following example modifies the CIFS server name associated with Vserver "vs1" from above example. The administrative status of the CIFS server must be set to "down" to proceed with Active Directory domain modification. If the command completes successfully, the administrative status is automatically set to "up" and there will be a job running to update related configurations.

    cluster1::> vserver cifs modify -vserver vs1 -cifs-server new_example -status-admin down
    
    In order to create an Active Directory machine account for the CIFS server, you
    must supply the name and password of a Windows account with sufficient
    privileges to add computers to the "ou=example_ou" container within the "example.com"
    domain.
    
    Enter the user name: administrator
    
    Enter the password:
    
    Successfully queued CIFS Server Modify job [id: xx] for CIFS server
    "NEW_EXAMPLE". To view the status of the job, use the "job show -id <jobid>"
    command.
    
    cluster1::>
    Top of Page