Using CIFS for Windows Access
System Administration Manual
263
Share qualifiers
To specify which clients have access to a CIFS share, qualifiers can be appended to the IP
address(es):
Some CIFS share qualifier examples are:
❑
10.1.2.38(ro)
Grants read-only access to the client with an IP address of 10.1.2.38.
❑
10.1.*.*(readonly)
Grants read-only access to all clients with an IP address beginning with 10.1.
The order in which the entries are specified is important. For example,
*(ro)
10.1.2.38(noaccess)
The first grants read-only access to all clients, whereas the second denies access to the specified
client. However, the second line is redundant, as the first line matches all clients. These lines
must be transposed to ensure access is denied to 10.1.2.38.
Controlling Access to Shares
Access to shares is restricted through a combination of share-level and file-level permissions.
These permissions determine the extent to which users can view and modify the contents of the
shared directory. When users request access to a share, their share-level permissions are
checked first. Then, if the users are authorized to access the share, their file-level permissions
are checked.
Qualifier
Description
read_write, readwrite, rw
Grants read/write access. This is the default setting.
read_only, readonly, ro
Grants the specified client read-only access to the CIFS
share.
no_access, noaccess
Denies the specified client access to the CIFS share.
