Thank you so much MBS - proving once again your MVP is well deserved! <KUDOS>
From: Michael B. Smith [mailto:[email protected]] Sent: Friday, September 21, 2012 7:51 AM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers OK. Final word back from NetApp - the storage guy brought in their AD team: If this is occurring then your setup is incorrect and you need to raise a support call. There should never be a need to set that option, based on what you have shared as your configuration. From: David Lum [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Wednesday, September 19, 2012 4:47 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers Currently yes. From: Michael B. Smith [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Wednesday, September 19, 2012 1:35 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers Is it bidirectional? From: David Lum [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Wednesday, September 19, 2012 4:14 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers They were joined to Forest 1 DomainB. The error is when trying to map from a server in Forest2 DomainA. There's a trust at that level as well, if that matters. From: Michael B. Smith [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Wednesday, September 19, 2012 12:48 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers His response: OK, it's guesswork at this stage but I want to suggest that when they ran CIFS setup on the controllers they selected Option 4. That suggests they did not join the controllers to the domain and are using some LDAP/NIS authentication mechanism and therefore, yes, the controllers are suddenly not Windows boxes & members of the domain, but are, sadly, probably exposing CIFS and NFS in the same volume (perfectly supported and legal etc) but not what the Windows clients prefer to play with......... Check with them, are the controllers (or the VFilers (they'll know what you mean)) ON the domain..... If they are then you shouldn't need the setting you specify (even with the old Windows 2003 clients) but if the controllers are NOT part of the domain then you're dealing with "3rd party" and will probably need that setting. That would be time for an infrastructure review to understand why Windows SERVER clients are accessing files off a NetApp NAS when that NAS is not inside the home forest, or at least a trusted Windows forest. From: Michael B. Smith [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Wednesday, September 19, 2012 3:07 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers I've passed the info along. From: David Lum [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Wednesday, September 19, 2012 2:49 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers DFL: 2003 OTAP version: 803Pp2 Windows versions of client devices are 2003 and 2008 R2 From: Michael B. Smith [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Wednesday, September 19, 2012 11:29 AM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers This is what a senior NetApp engineer says: You're not dealing with storage as a matter of fact. We natively join the domain and look like a Windows box - for the most part. Question to ask them before I answer you. DFL of AD. Version on OnTAP on the storage and Windows version of the client devices. I'll get back to you when near a big keyboard and armed with the answer i those questions. First pass? Old information. Probably no longer accurate. So...what are the answers to his questions? :) From: Michael B. Smith [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Wednesday, September 19, 2012 1:58 PM To: NT System Admin Issues Subject: RE: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers I wouldn't do that. But let me check with a netapp guy. From: David Lum [mailto:[email protected]]<mailto:[mailto:[email protected]]> Sent: Wednesday, September 19, 2012 12:27 PM To: NT System Admin Issues Subject: NetApp CIFS, Windows Servers and Send unencrypted password to third-party SMB servers I am being asked to enable the setting "Send unencrypted password to third-party SMB servers" so we can map Windows Servers to NetApp CIFS shares. This thread shows it worked for him: https://communities.netapp.com/thread/24037 Anyone here have any experience with NetApp, CIFS and Windows servers? David Lum Systems Engineer // NWEATM Office 503.548.5229 // Cell (voice/text) 503.267.9764 ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected]<mailto:[email protected]> with the body: unsubscribe ntsysadmin ~ Finally, powerful endpoint security that ISN'T a resource hog! ~ ~ <http://www.sunbeltsoftware.com/Business/VIPRE-Enterprise/> ~ --- To manage subscriptions click here: http://lyris.sunbelt-software.com/read/my_forums/ or send an email to [email protected] with the body: unsubscribe ntsysadmin
