User Mapping; Group Mapping; Mapping Clients - HP NetStorage 6000 Manual

File sharing security
Hide thumbs Also See for NetStorage 6000:
Table of Contents

Advertisement

§ Group name mapping - groups have equivalent UNIX and NT credentials if the primary group
name associated with an NT account is the same as a group defined for UNIX accounts.

5.2.1 User Mapping

There are two ways that a HP NetStorage 6000 user can obtain a UID. In the first case, the user has a UNIX
account and the administrator has elected to do some type of mapping - either by user logon name or full name
mapping. If the Windows client is matched to a UNIX account then the UID associated with the UNIX account
will be assigned to them. Otherwise, the HP NetStorage 6000 will assign a UID number that will be associated
with their NT domain, logon name and full name fields. Once the user has a UID assigned to them, then any
further activities on the server will have this unique UID associated with the file or directory metadata.
The HP NetStorage 6000 assigns UID values beginning with number 60001. This number was chosen so as to
not conflict with typical UNIX installations that don't have or use numbers greater than 60000.
The HP NetStorage 6000 administrator provides information about their UNIX clients automatically by enabling
the NIS server. Where this is enabled, the NIS server database will be automatically downloaded and
refreshed on a periodic basis. If this feature is not enabled, or the UNIX administrator is not using a NIS server
to manage their UNIX accounts, they will need to manually edit and manage the mapping files that are used to
associate UNIX and Windows accounts. For user mapping the passwd.nis file is used.

5.2.2 Group Mapping

In a manner consistent with user mapping, group mapping assigns a unique GID for Windows clients. The HP
NetStorage 6000 will attempt to map the Windows clients' primary group with a known UNIX group. If there is
no match then the HP NetStorage 6000 will assign a GID beginning with number 60001. Once the group
number is assigned this number will be part of the metadata that is associated with the users files and directories.
In a similar manner with User mapping, the administrator provides UNIX group information by enabling the
automatic download of the NIS server data. For group mapping the group.nis file contains information about
UNIX groups along with their associated GID and members. If the NIS server is not enabled or used, then the
administrator must manually edit and manage this file.

6 Mapping Clients

User mapping is used to create an equivalence relationship between a UNIX user and an NT user in which both
sets of credentials are deemed to have equivalent rights on the system. Since the underlying file system used by
the HP NetStorage 6000 is a UNIX system it is really only necessary to map NT users to a UNIX domain.
Each time a Windows user logs in to the system, the mapping files are checked to determine the user's UNIX
credentials. The passwd file and users.map file are searched to determine whether the Windows client had
previously been assigned a UNIX UID value. The user's NT domain name and user name are used in this
search. If a match is found, the UNIX UID is taken from the matching entry. If there is no match, then one of the
four mechanisms described below is used to determine the user's UNIX UID. The mechanism to be used is
controlled via the user mapping policy setting.
Copyright © 2000 Hewlett-Packard Company
Page 20 of 28
All Rights Reserved

Advertisement

Table of Contents
loading

This manual is also suitable for:

Surestore netstorage 6000

Table of Contents