Veritas Access Appliance 8.2 Upgrade Guide

Last Published:
Product(s): Appliances (8.2)
Platform: Veritas 3340,Veritas 3350,Veritas 3360

Considerations for CIFS server

Configuring CIFS as a standalone server (non-AD environment) is not supported in version 8.2. Commands associated with CIFS local users and groups are deprecated in version 8.2. CIFS shares exported with local users are inaccessible after an upgrade.

Access Appliance must be configured to become a member of an AD security domain and use the services of the AD domain controller. When Access Appliance operates in the AD domain mode, it acts as a domain member server. Before you upgrade, you must change the CIFS server type from standalone to domain member, else the upgrade precheck fails with the following error:

[Error] V-409-776-30151: The CIFS service is configured in standalone mode with the security setting set to user. The user security mode is not supported when the FIPS mode is enabled for the appliance. To resolve this issue, refer to article 100059081.

To configure CIFS server as a domain member and grant permission to domain users to files owned by CIFS local users:

  1. Stop the CIFS server:

    cifs server stop

  2. Configure AD server settings:

    network ad set domain domaincontroller workgroup domainuser

    network ad enable

  3. Start the CIFS server with ads security:

    cifs server start

  4. Map CIFS local user to a domain user:

    cifs mapuser add domainuser domainname cifs_local_user

  5. Map the share on Windows client with the same local user (cifs_local_user) specified in step 4.
  6. Give permissions as needed to file and folders for domain users which are mapped to the local user (cifs_local_user) .
  7. Unmap the earlier share from step 5 and map the share with the domain user. Try to access files as per the granted permissions.
CIFS configured as domain member server in ctdb clustering mode

If CIFS is configured as domain member server in ctdb clustering mode, during the upgrade, CIFS services are taken offline and the services are brought online after the upgrade completes. After the upgrade, you must use the FQDN of the virtual IP address instead of the virtual IP address to access the shares after mapping the shares on Windows client.

For details about how to access the CIFS share after the upgrade is complete, See Accessing CIFS shares.

CIFS configured as domain member server in normal clustering mode

If CIFS is configured as domain member server in normal clustering mode, the upgrade is successful but access to the shares fails as the shares use the virtual IP address. You must delete the shares that are already present and add them back. When you add the shares again, use the FQDN of the virtual IP address instead of the virtual IP address.

For details about how to access the CIFS share after the upgrade is complete, See Accessing CIFS shares.