Enabling or disabling local user authentication

You can enable or disable local user authentication for SMB access on storage virtual machines (SVMs). The default is to allow local user authentication, which is useful when the SVM cannot contact a domain controller or if you choose not to use domain-level access controls.

Before you begin

Local users and groups functionality must be enabled on the CIFS server.

About this task

You can enable or disable local user authentication at any time. If you want to use local users for authentication when creating an SMB connection, you must also enable the CIFS server's local users and groups option.

Procedure

  1. Set the privilege level to advanced: set -privilege advanced
  2. Perform one of the following actions:
    If you want local authentication to be... Enter the command...
    Enabled vserver cifs options modify -vserver vserver_name -is-local-auth-enabled true
    Disabled vserver cifs options modify -vserver vserver_name -is-local-auth-enabled false
  3. Return to the admin privilege level: set -privilege admin

Example

The following example enables local user authentication on SVM vs1:

cluster1::>set -privilege advanced
Warning: These advanced commands are potentially dangerous; use them
only when directed to do so by technical support personnel.
Do you wish to continue? (y or n): y 

cluster1::*> vserver cifs options modify -vserver vs1 -is-local-auth-enabled true

cluster1::*> set -privilege admin