Skip to main content

Add, remove, or replace trusted domains in preferred trusted domain lists

Contributors netapp-ahibbard netapp-thomi
PDFs

You can add or remove trusted domains from the preferred trusted domain list for the SMB server or you can modify the current list. If you configure a preferred trusted domain list, this list is used instead of the discovered bidirectional trusted domains when performing multidomain name mapping searches.

About this task

  • If you are adding trusted domains to an existing list, the new list is merged with the existing list with the new entries placed at the end. The trusted domains are searched in the order they appear in the trusted domain list.

  • If you are removing trusted domains from the existing list and do not specify a list, the entire trusted domain list for the specified storage virtual machine (SVM) is removed.

  • If you modify the existing list of trusted domains, the new list overwrites the existing list.

Note

You should enter only bidirectionally trusted domains in the preferred trusted domain list. Even though you can enter outbound or inbound trust domains into the preferred domain list, they are not used when performing multidomain name mapping searches. ONTAP skips the entry for the unidirectional domain and moves on to the next bidirectional trusted domain in the list.
Step

  1. Perform one of the following actions:

    If you want to do the following with the list of preferred trusted domains…​ Use the command…​

    Add trusted domains to the list

    vserver cifs domain name-mapping-search add -vserver _vserver_name_ -trusted-domains FQDN, ...

    Remove trusted domains from the list

    vserver cifs domain name-mapping-search remove -vserver _vserver_name_ [-trusted-domains FQDN, ...]

    Modify the existing list

    vserver cifs domain name-mapping-search modify -vserver _vserver_name_ -trusted-domains FQDN, ...
Examples

The following command adds two trusted domains (cifs1.example.com and cifs2.example.com) to the preferred trusted domain list used by SVM vs1:

cluster1::> vserver cifs domain name-mapping-search add -vserver vs1 -trusted-domains cifs1.example.com, cifs2.example.com

The following command removes two trusted domains from the list used by SVM vs1:

cluster1::> vserver cifs domain name-mapping-search remove -vserver vs1 -trusted-domains cifs1.example.com, cifs2.example.com

The following command modifies the trusted domain list used by SVM vs1. The new list replaces the original list:

cluster1::> vserver cifs domain name-mapping-search modify -vserver vs1 -trusted-domains cifs3.example.com
Related information

Displaying information about the preferred trusted domain list