topic Modifying Security Permissions on StoreOnce CIFS share in StoreOnce Backup Storage

Modifying Security Permissions on StoreOnce CIFS share

Ahmadgmc — Mon, 28 Nov 2022 08:46:06 GMT

Greetings,

we are trying to configure CIFS share permissions as per Veritas DLO recommendation however when using MMC to edit share and security permissions for a CIFS share, the security permissions got inherited from somewhere and it ignores any change we make. we tried to disable the inheritance but it got enabled automatically.

Below are the needed permissions for DLO according to Veritas documentation: ( we are using StoreOnce in Active Directory Authentication mode)

DLO Storage:

These are configured by DLO when the storage is setup, so should not need to be changed

DLO (NUDF) Storage Share Permissions;

Everyone; Full
Local Server Administrator; Full
DLO Service Account; Full

DLO (NUDF) Storage Security Permissions (not inherited);

Everyone; Read & Execute
Local Server Administrator; Full Control
DLO Service Account; Full Control

DLO (NUDF) User directory Security Permissions (not inherited - 1 folder per User, restricted to Administrators & named User only )

<Domain User> Account; Full
Local Server Administrator; Full
DLO Service Account; Full

Query: Modifying Security Permissions on StoreOnce CIFS share

support_s — Tue, 15 Nov 2022 07:14:13 GMT

System recommended content:

1. HPE StoreOnce 3660, 5260 and 5660 Systems User Guide for StoreOnce software version 4.3.x | NAS CIFS authentication modes

2. HPE StoreOnce VSA and High Availability Manager Systems User Guide for StoreOnce version 4.3.x | NAS CIFS authentication modes

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

Re: Query: Modifying Security Permissions on StoreOnce CIFS share

Ahmadgmc — Tue, 15 Nov 2022 08:43:03 GMT

Thank you for your reply.

actually, we followed the HPE guide to configure CIFS access and authentication mode but we are unable to disable inheritance in security permission tab .

we are facing an issue similar to this one:

https://social.technet.microsoft.com/Forums/ie/en-US/b1e7bc7e-0057-4b6b-ab6b-5c1417039dc6/cifs-shares-security-permission?forum=winserverfiles

Re: Modifying Security Permissions on StoreOnce CIFS share

sbhat09 — Wed, 23 Nov 2022 12:45:01 GMT

Hello @Ahmadgmc,

Have you checked if it is being inherited from the NAS system -> Backup software -> StoreOnce NAS share?

Regards,
Srinivas Bhat

If you feel this was helpful please click the KUDOS! thumb below!
Note: All of my comments are my own and are not any official representation of HPE.

Re: Modifying Security Permissions on StoreOnce CIFS share

Ahmadgmc — Thu, 24 Nov 2022 05:43:25 GMT

@sbhat09 Thank you for your reply.

where to check these settings on the StoreOnce?

Re: Modifying Security Permissions on StoreOnce CIFS share

sbhat09 — Thu, 24 Nov 2022 15:13:56 GMT

Hello @Ahmadgmc,

You can't check that from StoreOnce. StoreOnce just stores the backup as orchestrated by the backup software. These permissions may be inherited from the host or NAS storage where the file share was originally backed up. Some backward investigation may help you find the reason.

Regards,
Srinivas Bhat

If you feel this was helpful please click the KUDOS! thumb below!
Note: All of my comments are my own and are not any official representation of HPE.

Re: Modifying Security Permissions on StoreOnce CIFS share

Ahmadgmc — Mon, 28 Nov 2022 04:31:36 GMT

@sbhat09

Greetings Srinivas ,

Thank you for your reply.

I want to explain that we are experiencing this issue without the backup being involved.

also, we are not taking a backup for a NAS storage.

assuming that a CIFS share was created on the SO and using Windows MMC console we were able to configure this CIFS share thus we were able to access it. the problem is that via the MMC we are trying to configure the security permission of this CIFS share with no luck.

Re: Modifying Security Permissions on StoreOnce CIFS share

sbhat09 — Mon, 28 Nov 2022 05:18:23 GMT

Hello @Ahmadgmc,

To find the root cause for this issue, it requires detailed analysis and backtracking of the permissions. I think contacting HPE support will be ideal in this scenario.

Regards,
Srinivas Bhat

If you feel this was helpful please click the KUDOS! thumb below!
Note: All of my comments are my own and are not any official representation of HPE.

Re: Query: Modifying Security Permissions on StoreOnce CIFS share

Protect123 — Tue, 13 Dec 2022 09:27:23 GMT

please follow the following articles it should solve your problem

How to configure Delegation in Active Directory between a DLO Maintenance Server and remote Storage Locations (veritas.com)

Re: Modifying Security Permissions on StoreOnce CIFS share

cabarrus — Mon, 27 Feb 2023 15:27:42 GMT

Hello - I'm trying to change the NTFS permissions on a NAS CIFS share on our StoreOnce 3660 and experiencing the samething. In our case I want Windows Server to write to the folder and not a specific backup application. Is this possible? thanks

Re: Modifying Security Permissions on StoreOnce CIFS share

Sunitha_Mod — Wed, 01 Mar 2023 11:15:08 GMT

Hello @cabarrus,

Thank you for posting! Since you have posted in an old topic and there is no response yet, I would recommend you to create a new topic using the create "New Discussion" button, so the expert can check and guide you further.

Re: Modifying Security Permissions on StoreOnce CIFS share

cabarrus — Wed, 01 Mar 2023 12:58:03 GMT

Thanks
I was able to come to the conclusion that the NAS CIFS Shares that are created are meant to be written to with a backup application. I was hoping I could drag and drop files onto a share but we don't have the ability to modify NTFS permissions like we would on a Windows CIFS Share.

Re: Modifying Security Permissions on StoreOnce CIFS share

sbhat09 — Thu, 30 Mar 2023 13:24:17 GMT

Hello @cabarrus,

Yes. That is true.

Windows file shares are meant for users to read/write data. Modifying permissions is possible.
StoreOnce file shares are meant for backup. It will archive the data as it was backed up by the backup application. You can't change permissions hierarchy later.

Regards,
Srinivas Bhat

If you feel this was helpful please click the KUDOS! thumb below!
Note: All of my comments are my own and are not any official representation of HPE.