Configuring User Name Mapping - Part 3 (Advanced Mapping)

re: Configuring User Name Mapping - Part 3 (Advanced Mapping)

Geoff Kransdorf — Tue, 04 Mar 2008 04:32:01 GMT

We're using this, and it works fine for UIDs, but it doesn't seem to work at all for groups. Here is an example:

Lets take a Unix Directory

drwxrwxr-x unixuser1 unixgroup1 ./test

Lets map WINuser1 to unixuser2

An AD group which WINuser1 is a member of is mapped to unixgroup1 in advanced mappings. For goos measure, unixuser2 is also in unixgroup1 on Unix (his default group is unixgroup2).

If ./test is set to 777, than WINuser1 can write to it. It correctly shows the file ownership as unixuser2:unixgroup2. Otherwise, it ignores both the implicit Unix group membership and also the explicit group mapping. So if ./test is set to 775, than WINuser1 cannot write to it.

This is a serious problem. I don't mind having to map users and groups individually, but if I can't use group permissions at all (only user permissions), than it's impossible to set up security properly for mapped users.

What is the workaround?

re: Configuring User Name Mapping - Part 3 (Advanced Mapping)

Ashish — Tue, 04 Mar 2008 04:38:37 GMT

I guess I will need a network trace capturing the success and failure you get alongwith mapadmin list -all output.

Drop me a mail using the Email link above so that I can share my email ID with you.

- Ashish

re: Configuring User Name Mapping - Part 3 (Advanced Mapping)

Geoffrey Kransdorf — Wed, 05 Mar 2008 08:09:13 GMT

We are using files on out SFU NFS gateway server for passwd and group. AFter discussion with Ashish, I added the Unix user id to the groups within the "groups" text file on the gateway and that made it work as expected. I'm still not sure how the Windows to Unix group mapping works though, especially if a Windows user ID is in an AD group but their mapped Unix user ID is not in the corresponding Unix group.

Thanks

Geoff

All (well, almost) about Client for NFS - Configuration and Performance

Services for UNIX - Interoperability — Tue, 15 Apr 2008 21:24:02 GMT

All (well, almost) about Client for NFS - Configuration and Performance I was looking at the referrals