Skip to main content

vserver cifs modify

Contributors
Suggest changes
PDFs

Modify a CIFS server

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

Description

The vserver cifs modify command modifies the site within the Active Directory domain to associate with the CIFS server if Data ONTAP cannot determine an appropriate site. You also can modify the name and ou of the CIFS server, join to a new domain or a workgroup, or rejoin to current domain. When a CIFS server is joining a domain, this command might take several minutes to complete.

Parameters

-vserver <vserver name> - Vserver

This parameter specifies the Vserver for the CIFS server whose associated site you want to modify.

[-cifs-server <NetBIOS>] - CIFS Server NetBIOS Name

This parameter specifies the name of the CIFS server (up to 15 characters). Before setting this parameter, the CIFS server must be stopped using the vserver cifs modify-status-admin`down command. When the command completes successfully, the administrative status of the CIFS server is automatically set to up` .

{ [-domain <TextNoCase>] - Fully Qualified Domain Name

This parameter specifies the fully qualified name of the Active Directory domain to associate with the CIFS server. Before setting this parameter, the CIFS server must be stopped using the vserver cifs modify-status-admin`down command. When the command completes successfully, the administrative status of the CIFS server is automatically set to up` .

[-ou <text>] - Organizational Unit

This parameter specifies the organization unit within the Active Directory domain to associate with the CIFS server. By default, this parameter is set to CN=Computers. Before setting this parameter, the CIFS server must be stopped using the vserver cifs modify-status-admin`down command. When the command completes successfully, the administrative status of the CIFS server is automatically set to up` . Modifications to this parameter are not supported for workgroup CIFS servers.

[-default-site <text>] - Default Site Used by LIFs Without Site Membership

This parameter specifies the site within the Active Directory domain to associate with the CIFS server if Data ONTAP cannot determine an appropriate site. Modifications to this parameter are not supported for workgroup CIFS servers.

| [-workgroup <NetBIOS>] - Workgroup Name }

This parameter specifies the name of the workgroup (up to 15 characters).

[-keytab-uri {scheme://(hostname|IPv4 Address|'['IPv6 Address']')…​}] - Kerberos Keytab File URI (privilege: advanced)

This parameter specifies loading a keytab file from the specified URI. This is applicabe if the CIFS server is being created in realm mode or domain mode.

[-status-admin {down|up}] - CIFS Server Administrative Status

Use this parameter to modify the administrative status of the cifs server. Modify the administrator status to down to stop cifs access.

[-comment <text>] - CIFS Server Description

Use this parameter to modify the comment of the server.

Examples

The following example changes the default site and administrative status of the CIFS server associated with Vserver "vs1":

cluster1::> vserver cifs modify -vserver vs1 -default-site default -status-admin up

The following example modifies the Active Directory domain and ou for the CIFS server associated with Vserver "vs1". The administrative status of the CIFS server must be set to "down" to proceed with Active Directory domain modification. If the command completes successfully, the administrative status is automatically set to "up".

cluster1::> vserver cifs modify -vserver vs1 -domain example.com -ou ou=example_ou -cifs-server example -status-admin down

In order to create an Active Directory machine account for the CIFS server, you
must supply the name and password of a Windows account with sufficient
privileges to add computers to the "ou=example_ou" container within the "example.com"
domain.

Enter the user name: administrator

Enter the password:

cluster1::>

The following example modifies the CIFS server associated with Vserver "vs1" from a domain to a workgroup. The administrative status of the CIFS server must be set to "down" for this command. If the command completes successfully, the administrative status is automatically set to "up".

cluster1::> vserver cifs modify -vserver vs1 -workgroup Sales -status-admin down

Warning: To enter workgroup mode, all domain-based features must be disabled
         and their configuration removed automatically by the system,
         including continuously-available shares, shadow copies, and AES.
         However, domain-configured share ACLs such as
         "EXAMPLE.COM\userName" will not work properly, but cannot be
         removed by Data ONTAP. Remove these share ACLs as soon as possible
         using external tools after the command completes. If AES is enabled,
         you may be asked to supply the name and password of a Windows account
         with sufficient privileges to disable it in the "EXAMPLE.COM" domain.
Do you want to continue? {y|n}: y

cluster1::>

The following example modifies the CIFS server associated with Vserver "vs1" from a workgroup to a domain. The administrative status of the CIFS server must be set to "down" for this command. If the command completes successfully, the administrative status is automatically set to "up".

cluster1::> vserver cifs modify -vserver vs1 -domain example.com -status-admin down

In order to create an Active Directory machine account for the CIFS server, you
must supply the name and password of a Windows account with sufficient
privileges to add computers to the "ou=example_ou" container within the "example.com"
domain.

Enter the user name: administrator

Enter the password:

cluster1::>

The following example modifies the CIFS server associated with Vserver "vs1" from a workgroup to a domain using keytab-uri. The administrative status of the CIFS server must be set to "down" for this command. If the command completes successfully, the administrative status is automatically set to "up".

cluster1::> vserver cifs modify -vserver vs1 -domain example.com -keytab-uri http://nbsweb.eng.btc.netapp.in/~shravanp/Sample1.keytab -status-admin down

cluster1::>

The following example modifies the CIFS server name associated with Vserver "vs1" from above example. The administrative status of the CIFS server must be set to "down" to proceed with Active Directory domain modification. If the command completes successfully, the administrative status is automatically set to "up" and there will be a job running to update related configurations.

cluster1::> vserver cifs modify -vserver vs1 -cifs-server new_example -status-admin down

In order to create an Active Directory machine account for the CIFS server, you
must supply the name and password of a Windows account with sufficient
privileges to add computers to the "ou=example_ou" container within the "example.com"
domain.

Enter the user name: administrator

Enter the password:

Successfully queued CIFS Server Modify job [id: xx] for CIFS server
"NEW_EXAMPLE". To view the status of the job, use the "job show -id <jobid>"
command.

cluster1::>