Skip to main content

Configure UNIX symbolic link support on SMB shares

Contributors netapp-thomi netapp-aherbin

You can configure UNIX symbolic link support on SMB shares by specifying a symbolic link share-property setting when you create SMB shares or at any time by modifying existing SMB shares. UNIX symbolic link support is enabled by default. You can also disable UNIX symbolic link support on a share.

About this task

When configuring UNIX symbolic link support for SMB shares, you can choose one of the following settings:

Setting Description

enable (DEPRECATED*)

Specifies that symbolic links are enabled for read-write access.

read_only (DEPRECATED*)

Specifies that symlinks are enabled for read-only access. This setting does not apply to widelinks. Widelink access is always read-write.

hide (DEPRECATED*)

Specifies that SMB clients are prevented from seeing symlinks.

no-strict-security

Specifies that clients follow symlinks outside of share boundaries.

symlinks

Specifies that symlinks are enabled locally for read-write access. The DFS advertisements are not generated even if the CIFS option is-advertise-dfs-enabled is set to true. This is the default setting.

symlinks-and-widelinks

Specifies that both local symlinks and widelinks for read-write access. The DFS advertisements are generated for both local symlink and widelinks even if the CIFS option is-advertise-dfs-enabled is set to false.

disable

Specifies that symlinks and widelinks are disabled. The DFS advertisements are not generated even if the CIFS option is-advertise-dfs-enabled is set to true.

"" (null, not set)

Disables symbolic links on the share.

- (not set)

Disables symbolic links on the share.

Note

*The enable, hide, and read-only parameters are deprecated and may be removed in a future release of ONTAP.

Steps
  1. Configure or disable symbolic link support:

    If it is…​ Enter…​

    A new SMB share

    vserver cifs share create -vserver vserver_name -share-name share_name -path path -symlink-properties {enable|hide|read-only|""|-|symlinks|symlinks-and-widelinks|disable},...]

    An existing SMB share

    vserver cifs share modify -vserver vserver_name -share-name share_name -symlink-properties {enable|hide|read-only|""|-|symlinks|symlinks-and-widelinks|disable},...]

  2. Verify that the SMB share configuration is correct: vserver cifs share show -vserver vserver_name -share-name share_name -instance

Example

The following command creates an SMB share named “data1” with the UNIX symbolic link configuration set to enable:

cluster1::> vserver cifs share create -vserver vs1 -share-name data1 -path /data1 -symlink-properties enable

cluster1::> vserver cifs share show -vserver vs1 -share-name data1 -instance

                          Vserver: vs1
                            Share: data1
         CIFS Server NetBIOS Name: VS1
                             Path: /data1
                 Share Properties: oplocks
                                   browsable
                                   changenotify
               Symlink Properties: enable
          File Mode Creation Mask: -
     Directory Mode Creation Mask: -
                    Share Comment: -
                        Share ACL: Everyone / Full Control
    File Attribute Cache Lifetime: -
                      Volume Name: -
                    Offline Files: manual
    Vscan File-Operations Profile: standard
Maximum Tree Connections on Share: 4294967295
       UNIX Group for File Create: -