How User Name Mapping works?

re: How User Name Mapping works?

Ibrahim T — Mon, 28 May 2007 01:02:37 GMT

I have one simple question, Where do I find the User Name Mapping service in Windows Vista ultimate x64?

I tried using the windows xp one and everything went well!

However on vista, without the user name mapping I cant tell vista which uid and gid I have.

Anyone know anything?

re: How User Name Mapping works?

Ashish — Mon, 28 May 2007 21:32:53 GMT

Unfortunately, Vista doesn't have User Name Mapping included. In fact, User Name Mapping will not be there in Windows Server 2008 (LH Server) too.

However, you can install User Name Mapping on one of your DCs or XP Machines.

You can also use Active Directory Lookup in Vista but your accounts need to have UNIX information populated in AD.

if you are not using domain accounts, you are left with using User Name Mapping from SFU 3.5 :-(

re: How User Name Mapping works?

Ashish — Thu, 07 Jun 2007 15:50:00 GMT

Anwering an unpublished comment -

Active Directory Lookup works only when you are on R2 schema level. For the reason that R2 schema is RFC2307 compliant (with minor deviations).

And, Server for NIS (whether from SFU or R2 IdMU) can only be installed on a Domain Controller and not on member servers.

re: How User Name Mapping works?

Ibrahim T — Sat, 16 Jun 2007 21:16:27 GMT

Hmm, yeh I guess I can install User Name Mapping on my XP, but the weird thing is that when I set the IP-address of the XP machine that has UNM installed so that it can get the UID/GIDs from there it doesnt work neither :/

I dont have the will to install active directory and what not.

This is only used for a home network really, not enterprise so I dont use domains for my PCs but rather just workgroup.

re: How User Name Mapping works?

Ashish — Mon, 25 Jun 2007 22:37:50 GMT

You need to edit the .maphosts file on the Windows XP system and put a "+" or the IP Address of the other systems in it before other systems can fetch the UNM data from it.

re: How User Name Mapping works?

Roy Kaldung — Mon, 15 Oct 2007 12:34:51 GMT

During the set up of SFU I recognized that disabled Active Directory Accounts leads to an error during user name mapping. The chown on the NIS/NFS client failed and results in a NULL SID, the chown on a windows host with the korn shell succeeded.

re: How User Name Mapping works?

Jim Carroll — Tue, 15 Jan 2008 21:26:22 GMT

I apologize if this is a duplicate, but it's been a few hours since I posted, and I don't see the message.

---

So I'm trying to get clear on the situation with Vista Ultimate running Client for NFS.

We are able to mount a remote share with no problems. We can even get a directory listing with no problems.

We attempt to read a file, owned by root:wheel with 0755 perms, and we get error 87 (visual studio reports this error as "The parameter is incorrect").

BUT if we attempt to read another file, owned by another user (not-root) with perms 0755, we are successful.

From a purely operational perspective, it would appear the Client For NFS was intentionally blocking access to the file based on UID/GID filtering, even though the server allowed the access. Is this possible?

Note: We've confirmed the error using several other read only programs. For example ROBOCOPY reports the same 'The parameter is incorrect' message when attempting to copy the file.

It would appear from the discussion above that even though we're just using the Client for NFS, we are required to run UNM, but that this software is not available for Vista ?!

In this particular remote office, we have a fleet of Unix boxes, and a single Vista Ultimate system (not w2k3, no longhorn and no XP). Does this mean we cannot access NFS shares?

Assuming UNM is required why are we only restricted from reading files owned by root, but not others?

FYI, the Unix box is FreeBSD 4.11. The /etc/exports file reads

/var -mapall=root -network 10.64.0.0 -mask 255.255.255.0

Any guidance you can offer would be appreciated.

Thanks

Jim C.

re: How User Name Mapping works?

Ashish — Wed, 16 Jan 2008 11:17:01 GMT

I guess capturing the network wil give us an idea why we see this error with root owned files.

Drop me a mail using the Email link on this blog and then you can send me the network trace.

- Ashish