Skip to main content

Enable or disable local user authentication

Contributors netapp-thomi netapp-ahibbard netapp-aherbin
PDFs

You can enable or disable local user authentication for SMB access on storage virtual machines (SVMs). The default is to allow local user authentication, which is useful when the SVM cannot contact a domain controller or if you choose not to use domain-level access controls.

Before you begin

Local users and groups functionality must be enabled on the CIFS server.

About this task

You can enable or disable local user authentication at any time. If you want to use local users for authentication when creating an SMB connection, you must also enable the CIFS server's local users and groups option.

Steps

  1. Set the privilege level to advanced: set -privilege advanced

  2. Perform one of the following actions:

    If you want local authentication to be…​ Enter the command…​

    Enabled

    vserver cifs options modify -vserver vserver_name -is-local-auth-enabled true

    Disabled

    vserver cifs options modify -vserver vserver_name -is-local-auth-enabled false

  3. Return to the admin privilege level: set -privilege admin

Example

The following example enables local user authentication on SVM vs1:

cluster1::>set -privilege advanced
Warning: These advanced commands are potentially dangerous; use them
only when directed to do so by technical support personnel.
Do you wish to continue? (y or n): y

cluster1::*> vserver cifs options modify -vserver vs1 -is-local-auth-enabled true

cluster1::*> set -privilege admin
Related information

How local user authentication works

Enabling or disabling local users and groups