即使禁用了"showsnapshot"共享属性、使用SMB 2.x的Windows客户端仍可访问~snapshot目录
适用场景
- ONTAP 9
- CIFS
问题描述
~snapshot
即使未"showsnapshot"
设置共享属性、也可以从Windows客户端目录访问
"showsnapshot"
未为共享"vol1"设置共享属性
::> cifs share show -vserver vs912 -share-name vol1
Vserver: vs912
Share: vol1
CIFS Server NetBIOS Name: VS912
Path: /vol1
Share Properties: oplocks
browsable
changenotify
access-based-enumeration
show-previous-versions
Symlink Properties: symlinks
File Mode Creation Mask: -
Directory Mode Creation Mask: -
Share Comment: -
Share ACL: Everyone / Full Control
File Attribute Cache Lifetime: -
Volume Name: vol1
Offline Files: manual
Vscan File-Operations Profile: standard
Maximum Tree Connections on Share: 4294967295
UNIX Group for File Create: -
- 卷上的"snapdir-access"设置为true
::> vol show -vserver vs912 -volume vol1 -fields snapdir-access
vserver volume snapdir-access
------- ------ --------------
vs912 vol1 true
- 在Windows客户端中:
在注册表的以下路径下,DWORD32"DirectoryCacheLifetime"
设置为零
HKEY_LOCAL_MACHINE\SYSTEM\CurrentControlSet\Services\LanmanWorkstation\Parameters