Quantum DXi-Series Command Line Interface (CLI) Guide
6-67081-05 Rev B
April 2012
30
NAS Configuration CLI Commands
Delete All Share Administrators
syscli --deleteall shareadmin [--sure]
This CLI command allows the admin user to remove the share admin rights from
all domain users or groups that have previously been granted this privilege (that
is, share administrators) except the built-in
domain admins
group. This
command works only if the system is joined to an ADS domain. If the
--sure
option is specified, no confirmation prompt will be displayed.
CIFS Share Access
Control
There are two types of users who are allowed access CIFS shares depending on
whether the system is joined to a workgroup or a Windows domain.
When the server is joined to a workgroup, only workgroup users can access CIFS
shares and the CLI shall provide the capabilities to manage them. Workgroup
users are users who are both in the local Linux database and the Samba
password database.
When the server is joined to a Windows domain, domain users are allowed to
access CIFS shares but the CLI shall not provide the capabilities to manage them.
To do this the Windows domain admin, not necessarily the CLI admin, has to log
in the Windows server and uses the Microsoft Management Console (MMC).
This CLI command merely provides a limited capability to grant share
administrator privileges to certain domain users. A share administrator has the
privilege of setting share permissions.
This CLI command applies when the system has joined a workgroup or a
Windows Domain. Otherwise, this CLI command will return an error.
The following CIFS Access Control commands are available:
•
•
•
•
Listing Share Users
syscli --list shareuser --share <share_name>
This CLI command allows the admin user to display a list all workgroup users
that have access to the specified CIFS share. If the list is empty, it means all
workgroup users are allowed read-write access to the specified share.
This command works only when the server is joined to a workgroup. If the
server is joined to an Active Directory domain, please use the Microsoft
Management Console (MMC) tool.
