[OpenIndiana-discuss] CIFS automount share visibility

[Jim Klimov]

On 2014-02-12 08:54, Stefan Müller-Wilken wrote:
> Dear all,
>
> I'm currently having problems with CIFS automount shares being visible to all connected users and not only to each user personally.
>
> Quick search has revealed that similar has happened in the past (https://www.mail-archive.com/cifs-discuss@opensolaris.org/msg01197.html), but it seems as if simply rebooting a few times does not fix the problem.
>
> @Jim: do you still remember what you've done to fix the problem?

I believe I defined the paths to home directories in smbautohome, i.e.

# cat /etc/smbautohome
*       /export/home/&

The individual user-home datasets have sharesmb=off

Now when the windows user contacts the server and is authorized (by
the name-password popup or by AD domain integration) he only sees
his home directory and shares with explicit sharesmb settings (and
which don't have a dollar sign in the end - which can be used to
hide some shares).

For the latter example, now that the fileserver has migrated to OI,
it can use CIFS child mounts (so that users can browse sub-datasets
as normal sub-directories in a single share). However, the default
automagic of this implementation created sort of weird names of
the child-dataset shares (based on full dataset name rather than
sharesmb=name=xxx of the parent dataset), and what's worse - they
were visible names. I prettied this up by explicitly renaming the
child datasets' cifs names so they are not visible, but can be
browsed by both direct request and via pretty recursion:

# zfs list -o sharesmb,name -r 
pond/export/DUMP/manual/oldsystems/windows
SHARESMB                                   NAME
name=Backups-OldWindows 
pond/export/DUMP/manual/oldsystems/windows
name=Backups-OldWindows__From-BOOKKEEPER$ 
pond/export/DUMP/manual/oldsystems/windows/_From-BOOKKEEPER
name=Backups-OldWindows__From-BRIDGE$ 
pond/export/DUMP/manual/oldsystems/windows/_From-BRIDGE
...

HTH,
//Jim