Modifying Security Permissions on StoreOnce CIFS share

[Ahmadgmc]

Greetings,

we are trying to configure CIFS share permissions as per Veritas DLO recommendation however when using MMC to edit share and security permissions for a CIFS share, the security permissions got inherited from somewhere and it ignores any change we make. we tried to disable the inheritance but it got enabled automatically.

Below are the needed permissions for DLO according to Veritas documentation: ( we are using StoreOnce in Active Directory Authentication mode)

DLO Storage:

These are configured by DLO when the storage is setup, so should not need to be changed

DLO (NUDF) Storage Share Permissions;

• Everyone; Full
• Local Server Administrator; Full
• DLO Service Account; Full

DLO (NUDF) Storage Security Permissions (not inherited);

• Everyone; Read & Execute
• Local Server Administrator; Full Control
• DLO Service Account; Full Control

DLO (NUDF) User directory Security Permissions (not inherited - 1 folder per User, restricted to Administrators & named User only )

• <Domain User> Account; Full
• Local Server Administrator; Full
• DLO Service Account; Full

[support_s]

System recommended content:

1. HPE StoreOnce 3660, 5260 and 5660 Systems User Guide for StoreOnce software version 4.3.x | NAS CIFS authentication modes

2. HPE StoreOnce VSA and High Availability Manager Systems User Guide for StoreOnce version 4.3.x | NAS CIFS authentication modes

Please click on "Thumbs Up/Kudo" icon to give a "Kudo".

Thank you for being a HPE valuable community member.

[Ahmadgmc]

Thank you for your reply. 

actually, we followed the HPE guide to configure CIFS access and authentication mode but we are unable to disable inheritance in security permission tab .

we are facing an issue similar to this one:

https://social.technet.microsoft.com/Forums/ie/en-US/b1e7bc7e-0057-4b6b-ab6b-5c1417039dc6/cifs-shares-security-permission?forum=winserverfiles

[sbhat09]

Hello @Ahmadgmc,

Have you checked if it is being inherited from the NAS system -> Backup software -> StoreOnce NAS share?

Regards,
Srinivas Bhat

If you feel this was helpful please click the KUDOS! thumb below!
Note: All of my comments are my own and are not any official representation of HPE.

[Ahmadgmc]

@sbhat09 Thank you for your reply.

where to check these settings on the StoreOnce? 

[sbhat09]

Hello @Ahmadgmc,

You can't check that from StoreOnce. StoreOnce just stores the backup as orchestrated by the backup software. These permissions may be inherited from the host or NAS storage where the file share was originally backed up. Some backward investigation may help you find the reason.

Regards,
Srinivas Bhat

If you feel this was helpful please click the KUDOS! thumb below!
Note: All of my comments are my own and are not any official representation of HPE.

[Ahmadgmc]

@sbhat09 

Greetings Srinivas ,

Thank you for your reply.

I want to explain that we are experiencing this issue without the backup being involved. 

also, we are not taking a backup for a NAS storage. 

assuming that a CIFS share was created on the SO and using Windows MMC console we were able to configure this CIFS share thus we were able to access it. the problem is that via the MMC we are trying to configure the security permission of this CIFS share with no luck.

[sbhat09]

Hello @Ahmadgmc,

To find the root cause for this issue, it requires detailed analysis and backtracking of the permissions. I think contacting HPE support will be ideal in this scenario.

Regards,
Srinivas Bhat

If you feel this was helpful please click the KUDOS! thumb below!
Note: All of my comments are my own and are not any official representation of HPE.

[Protect123]

please follow the following articles it should solve your problem 

How to configure Delegation in Active Directory between a DLO Maintenance Server and remote Storage Locations (veritas.com)

[cabarrus]

Hello - I'm trying to change the NTFS permissions on a NAS CIFS share on our StoreOnce 3660 and experiencing the samething. In our case I want Windows Server to write to the folder and not a specific backup application. Is this possible? thanks

[Sunitha_Mod]

Hello @cabarrus,

Thank you for posting!  Since you have posted in an old topic and there is no response yet, I would recommend you to create a new topic using the create "New Discussion" button, so the expert can check and guide you further. 

[cabarrus]

Thanks 
I was able to come to the conclusion that the NAS CIFS Shares that are created are meant to be written to with a backup application. I was hoping I could drag and drop files onto a share but we don't have the ability to modify NTFS permissions like we would on a Windows CIFS Share. 

[sbhat09]

Hello @cabarrus, 

Yes. That is true.

Windows file shares are meant for users to read/write data. Modifying permissions is possible.
StoreOnce file shares are meant for backup. It will archive the data as it was backed up by the backup application. You can't change permissions hierarchy later.

Regards,
Srinivas Bhat

If you feel this was helpful please click the KUDOS! thumb below!
Note: All of my comments are my own and are not any official representation of HPE.