IBM Storwize V7000 Unified Quick Installation Manual page 41

Authentication
Infrastructure?
No
Local
Passwords
Choose
Implement
external
auth
Stay with local
Ensure that you
have method for
manually syncing
Obtain the
password tables
information in
and highlight
Table <N>
risk of UID conflicts
Figure 12. Planning chart for determining an authentication method
Internally the Storwize V7000 Unified system uses IBM General Parallel File
System (GPFS). GPFS is a UNIX file system that uses UNIX-style user IDs (UID)
and group IDs (GID) to manage file permissions.
For Windows (CIFS) users to access files, there must be some sort of User ID
Mapping, such as some way to map the Windows user and group objects to Unix
UIDs and GIDs. The Storwize V7000 Unified system supports user ID mapping
either internally or externally. While external user ID mapping is preferred, internal
mapping can be done using a table local to the Storwize V7000 Unified system to
map Windows user and group objects to arbitrary Unix UIDs and GIDs. That table
is not accessible externally, even to another Storwize V7000 Unified system for
asynchronous file system replication.
Asynchronous replication thus requires external user ID mapping, specifically
Windows Active Directory with the Subsystem for Unix (SUA) enabled and
populated. Mixed client access, which is having both UNIX and Windows clients
access the same files (using NFS and CIFS), requires external user mapping using
either Active Directory with SUA/SFU or LDAP with Samba extensions.
UNIX
UNIX/Windows/Mixed
Windows
Active Directory with
NO
Unix ID mapping
mapping.
Yes
Choose
Implement ID Mapping
Implement ID mapping
Populate all users and
groups with UNIX IDs
LDAP
or
NIS
Don't
Implement ID
Mapping
Use Unified Internal ID Mapping
There is a risk of ID conflict
Await Development to produce
export method or automation for
user ID assignments
MIXED
Authentication
Infrastructure?
Yes
Active Directory with
UNIX ID mapping
mapping enabled.
Windows
Active Directory
Version?
2003sp2 or 2008
Pre-2003sp2
ID mapping included,
SFU, use
just needs to be
schema
enabled, use schema
type sfu
Chapter 1. Before you begin the installation
Windows 2008
Active Directory
with UNIX ID
Mapping
type rfc2307
21