Veritas Access Appliance Administrator's Guide
- Section I. Introducing Access Appliance
- Section II. Configuring Access Appliance
- Managing users
- Configuring the network
- Configuring authentication services
- Configuring user authentication using digital certificates or smart cards
- Section III. Managing Access Appliance storage
- Configuring storage
- Managing disks
- Access Appliance as an iSCSI target
- Configuring storage
- Section IV. Managing Access Appliance file access services
- Configuring the NFS server
- Setting up Kerberos authentication for NFS clients
- Using Access Appliance as a CIFS server
- About configuring CIFS for Active Directory (AD) domain mode
- About setting trusted domains
- About managing home directories
- About CIFS clustering modes
- About migrating CIFS shares and home directories
- About managing local users and groups
- Using Access Appliance as an Object Store server
- Configuring the NFS server
- Section V. Managing Access Appliance security
- Section VI. Monitoring and troubleshooting
- Configuring event notifications and audit logs
- About alert management
- Appliance log files
- Configuring event notifications and audit logs
- Section VII. Provisioning and managing Access Appliance file systems
- Creating and maintaining file systems
- Considerations for creating a file system
- About managing application I/O workloads using maximum IOPS settings
- Modifying a file system
- Managing a file system
- Creating and maintaining file systems
- Section VIII. Provisioning and managing Access Appliance shares
- Creating shares for applications
- Creating and maintaining NFS shares
- About the NFS shares
- Creating and maintaining CIFS shares
- About the CIFS shares
- About managing CIFS shares for Enterprise Vault
- Integrating Access Appliance with Data Insight
- Section IX. Managing Access Appliance storage services
- Configuring episodic replication
- Episodic replication job failover and failback
- Configuring continuous replication
- How Access Appliance continuous replication works
- Continuous replication failover and failback
- Using snapshots
- Using instant rollbacks
- Configuring episodic replication
- Section X. Reference
Manually setting WORM-retention on a file over CIFS
You can set WORM-retention on a file manually over CIFS.
Perform the following steps:
Set the file's access time (atime) to the required retention time
Set the read-only attribute to file
The file is marked WORM with assigned retention after the successful completion of the above steps.
Note:
Veritas does not support extending the existing retention period of a WORM file over CIFS by changing the access time of the file as it is not possible to change the access time of a read-only file.
Note:
The retention period cannot be reduced once it is set.
To manually set WORM-retention on a file over CIFS from a Windows client
- Create a WORM-enabled file system.
Storage> fs create simple fs_worm_ct 15g pool1 blksize=1024 pdir_enable=no encrypt=off worm=yes 100% [#] Creating simple filesystem ACCESS fs SUCCESS V-288-0 Created simple file system fs_worm_ct
- Create a CIFS share of the file system in full_acl mode.
CIFS> share add fs_worm_ct sh_fs_worm_ct allow=evlab\ vaultadmin,rw,full_acl Exporting CIFS filesystem : sh_fs_worm_ct ...Success.
- You can see the CIFS shares using the following command:
CIFS> share show ShareName FileSystem ShareOptions access_partition ev_vs_partition owner=root,group=root,fs_mode=1777,allow=EVLAB\ vaultadmin,rw access_worm_share ev_worm_fs owner=root,group=root,fs_mode=1777,allow=evlab\ vaultadmin,rw,full_acl sh_fs_worm_ct fs_worm_ct owner=root,group=root,fs_mode=1777,allow=evlab\ vaultadmin,rw,full_acl
- Verify the CIFS share from Windows explorer using the virtual IP associated with the share.
- Create some files on the CIFS share.
- Map the share to the network drive.
- Click Finish.
- The drive which is associated with the share is Z:.
- Use Microsoft PowerShell to set WORM-retention on a file manually over CIFS.
Go to Z: drive. Check the current access time of the file.
(Get-Item .\testf1.txt).LastAccessTime
Thursday, February 1, 2018 12:03:54 AM"
Where testf1.txt is the name of the file.
Set the file's access time (atime) to the required retention time using the following command:
(Get-Item .\testf1.txt).LastAccessTime="February 10, 2018 12:03:54 AM"
Set the read-only attribute to file.
Set-ItemProperty -Path "Z:\testf1.txt" -Name IsReadOnly -Value $true
The file is marked as WORM with retention time of Feb 10, 2018 12:03:54 AM.
Note:
If you execute a delete operation on a WORM-enabled file from Windows, then it appears that the WORM file is deleted even though the file is not deleted from the storage. This is Windows behavior, and is seen because the file delete command is issued from the Windows client over CIFS which asynchronously marks the file for deletion and returns success to the user. But the asynchronously issued delete command actually fails as the file is marked as WORM and you can see the file by refreshing directory contents.