Adding an SMB file system

Before mounting SMB clients to the shares exposed by the NAS Bridge, you must add one or more SMB file systems.

Before you begin

Steps

  1. Click Configuration at the top of the web page.
  2. Click SMB Filesystems.
  3. Click Add.
    The Add SMB Filesystem dialog box appears.
    Add SMB File System
  4. Type or select all of the configuration values as appropriate for your deployment plan and storage environment:
    • StorageGRID: Select the IP address of the StorageGRID Gateway Node.
    • Bucket: A bucket in your StorageGRID system. If the named bucket does not exist, NAS Bridge creates it.
    • Cache device: Select the cache device you want to use for this file system.
    • Active Directory
    • Share name
    • Owner: Initial user with access permissions.
    • Group: Initial group with access permissions.
    • Read Access: A comma-separated list of users and groups that are granted read-only access to this file system.
    • Write Access: A comma-separated list of users and groups that are granted read-write access to this file system.
      Note: If you want all users in the Active Directory to have read-write access to the file system, leave both the Read Access and Write Access fields blank.
    • File Attributes: Check the box to enable NTFS file attribute tracking.
      Note: Enabling tracking could adversely impact performance.
  5. Click Save.
    When the operation completes, the new file system is displayed with a unique ID and a status of READY.

    The Role of "Primary" indicates that this is the first file system to which the bucket has been assigned. If you assign the same bucket to file systems from multiple NAS Bridge virtual machines, each subsequent file system is assigned the role of Secondary and becomes read-only. The NAS Bridge assigns these roles to prevent data corruption or loss.


    This image is described by the surrounding text.

  6. Secure the share as required using the permissions on the share itself.
    Attention: By default, SMB share grants permissions to Everyone as well as CREATOR OWNER, CREATOR GROUP, Owner, and Group. You must follow these steps to ensure the desired level of security on the share.
    1. From Windows Explorer, enter the domain name of the NAS Bridge.
      Example
      \\my-nas-bridge\
      Windows Explorer shows all SMB shares for the NAS Bridge.
    2. Right click the SMB share, and select Properties.
    3. On the Security tab, add or remove users and groups as desired.
      Attention: Remove the user Everyone unless you want everyone to be able to access the share.
      Note: If you see a security identifier (SID), such as "S-1-5-32-544," and not the actual user name, use the client computer to verify DNS settings.


      SMB Permissions

    4. Set desired permissions on each user and group.
    5. In the Security tab, click Advanced and set the Owner as desired.
      Example
      For example, you might want to set the following permissions.
      • Grant user A full control and user B read/write access.
      • Grant group X full control.
      • Grant user A full control, user B read/write access, and Everyone read-only access.
  7. When you are finished, download a NAS Bridge recovery package.
    Attention: You should download a NAS Bridge recovery package whenever you make configuration changes or upgrade to a new version of NAS Bridge. Recovery packages from previous versions will not be valid.
    1. Go to Maintenance > Recovery Procedure .
    2. Click Generate Package.
    3. Select the package from the table, and click Download to download the package to your local workstation.
    4. Save the package to a safe location.