即使禁用了"showsnapshot"共享属性、使用SMB 2.x的Windows客户端仍可访问~snapshot目录

适用场景

• ONTAP 9
• CIFS

问题描述

• ~snapshot 即使未 "showsnapshot" 设置共享属性、也可以从Windows客户端目录访问

• "showsnapshot" 未为共享"vol1"设置共享属性

::> cifs share show -vserver vs912 -share-name vol1
                    Vserver: vs912
                     Share: vol1
           CIFS Server NetBIOS Name: VS912
                     Path: /vol1
               Share Properties: oplocks
                        browsable
                        changenotify
                        access-based-enumeration
                        show-previous-versions
              Symlink Properties: symlinks
            File Mode Creation Mask: -
         Directory Mode Creation Mask: -
                 Share Comment: -
                   Share ACL: Everyone / Full Control
         File Attribute Cache Lifetime: -
                  Volume Name: vol1
                 Offline Files: manual
         Vscan File-Operations Profile: standard
       Maximum Tree Connections on Share: 4294967295
          UNIX Group for File Create: -

• 卷上的"snapdir-access"设置为true 

::> vol show -vserver vs912 -volume vol1 -fields snapdir-access
vserver volume snapdir-access
------- ------ --------------
vs912   vol1   true

• 在Windows客户端中：
  在注册表的以下路径下，DWORD32 "DirectoryCacheLifetime" 设置为零
  HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters