Configuring User Name Mapping - Part 1

re: Configuring User Name Mapping - Part 1

David Thomson — Fri, 20 Jul 2007 02:31:47 GMT

I'm trying to setup a schema for having unmapped users have access to a NFS share on windows2003 through an existing mapped group.

The scenario is as follow’s:

I have group in unix called unixClients which is mapped to windowsClients

I created a user called unixunmapped which is not mapped but is a member of the unixClients group

The purpose for this is so that I can create as many users that belong to the unixClients group as I want without having to manually create a mapped 1:1 user relationship and have my NFS share work.

re: Configuring User Name Mapping - Part 1

Ashish — Tue, 31 Jul 2007 00:50:35 GMT

Hi David,

You also need to map users since mapping just the groups doesn't work as expected with User Name Mapping.

User Name Mapping does authentication before NFS request can get through and unless you map user accounts, this authentication doesn't take place.

To avoid manual mapping of user accounts, you can make use of Simple maps in UNM configuration which maps Windows and UNIX users having same login names in both the worlds automatically.

I'm sorry there was a lot of spamming happening on this blog so your comment went unnoticed till now.

re: Configuring User Name Mapping - Part 1

Andy Wettstein — Thu, 18 Oct 2007 19:07:27 GMT

> Server for NFS and Client for NFS which ship with Windows Server 2003 R2 and Windows Vista can also talk to your RFC2307-compliant LDAP store to fetch the UID and GID information directly

I am looking at a w2k3 r2 server and see no way to use an LDAP server for looking up UID/GID information. Where is it configured?

re: Configuring User Name Mapping - Part 1

Ashish — Thu, 18 Oct 2007 22:21:03 GMT

Open the Microsoft Services for NFS MMC snap-in, right click on the top of the hierarchy (on Microsoft Services for NFS) in the MMC snap-in and select Properties. Under the General Settings, you should see this option.

re: Configuring User Name Mapping - Part 1

Andy Wettstein — Tue, 23 Oct 2007 16:48:20 GMT

Ok, Opening up the Properties on Microsoft Services for NFS, I see 2 options.

User Name Mapping Server: (Currently set to localhost)

and

A checkbox for Active Directory Lookup.

A screenshot:

http://webusers.physics.uiuc.edu/~ajw/sfu.png

This is w2k3 R2 SP2. Is there something extra that needs to be installed?

re: Configuring User Name Mapping - Part 1

Ashish — Tue, 23 Oct 2007 16:59:40 GMT

Enable the other check box and type your domain name i.e. mydomain.com and you are all set to go.

I am assuming that your users have the values set in RFC2307 attributes like uidNumber, GidNumber, msSFU30name etc.

re: Configuring User Name Mapping - Part 1

Andy Wettstein — Tue, 23 Oct 2007 17:24:18 GMT

Ah, I see. By RFC2307 LDAP server you meant an AD server with RFC2307 schema enabled. It's not possible to use a different LDAP server?

re: Configuring User Name Mapping - Part 1

Ashish — Tue, 23 Oct 2007 17:54:26 GMT

It should work with any RFC2307 compliant LDAP Directory.

However, no documentation. Maybe, you can confirm :)

If you need any help, please send me a mail and I can help you with whatever infomation I may have in this regard.

All (well, almost) about Client for NFS - Configuration and Performance

Services for UNIX - Interoperability — Tue, 15 Apr 2008 21:23:56 GMT

All (well, almost) about Client for NFS - Configuration and Performance I was looking at the referrals

Configuring User Name Mapping - Part 2 (Simple Mapping)

Services for UNIX - Interoperability — Sat, 19 Apr 2008 00:23:55 GMT

Configuring User Name Mapping - Part 2 (Simple Mapping) Continuing the discussion from Configuring User