Adding an SMB file system

Before mounting SMB clients to the shares exposed by the NAS Bridge, you must add one or more SMB file systems.

Before you begin

Steps

  1. Click Configuration at the top of the web page.
  2. Click SMB Filesystems.
  3. Click Add.
  4. Type or select all of the configuration values as appropriate for your deployment plan and storage environment:
    • StorageGRID – Select the IP address of the StorageGRID API Gateway Node.
    • Bucket – A bucket in your StorageGRID system. If the named bucket does not exist, NAS Bridge creates it.
    • Cache device – Select the cache device you want to use for this file system.
    • Active Directory
    • Share name
    • Owner – Initial user with access permissions.
    • Group – Initial group with access permissions.
  5. Click Save.
    When the operation completes, the new file system is displayed with a unique ID and a status of READY.

    The Role of "Primary" indicates that this is the first file system to which the bucket has been assigned. Later, if the same bucket is assigned to any other file system on another NAS Bridge virtual machine, the Role of "Secondary" is assigned to the file system. The NAS Bridge automatically assigns file system roles, and they cannot be changed manually. A file system with a Role of "Secondary" cannot be mounted by a client.


    This image is described by the surrounding text.

  6. Secure the share as required using the permissions on the share itself.
    Attention: By default, SMB share grants permissions to Everyone as well as CREATOR OWNER, CREATOR GROUP, Owner, and Group. You must follow these steps to ensure the desired level of security on the share.
    1. From Windows Explorer, enter the domain name of the NAS Bridge.
      Example
      \\my-nas-bridge\
      Windows Explorer shows all SMB shares for the NAS Bridge.
    2. Right click the SMB share, and select Properties.
    3. On the Security tab, add or remove users and groups as desired.
      Attention: Remove the user Everyone unless you want everyone to be able to access the share.
      Note: If you see a security identifier (SID), such as "S-1-5-32-544," and not the actual user name, use the client computer to verify DNS settings.


      SMB Permissions

    4. Set desired permissions on each user and group.
    5. In the Security tab, click Advanced and set the Owner as desired.
      Example
      For example, you might want to set the following permissions.
      • Grant user A full control and user B read/write access.
      • Grant group X full control.
      • Grant user A full control, user B read/write access, and Everyone read-only access.
  7. When you are finished, download a NAS Bridge recovery package.
    Attention: You should download a NAS Bridge recovery package whenever you make configuration changes or upgrade to a new version of NAS Bridge. Recovery packages from previous versions will not be valid.
    1. Go to Maintenance > Recovery Package .
    2. Click Generate Package.
    3. Select the package from the table, and click Download to download the package to your local workstation.
    4. Save the package to a safe location.