Table of Contents
Advertisement
Creating a Mapping Rule (CLI)
■
■
d.
unixname - Set to one of the following options:
■
■
■
e.
unixtype - Set to either
hostname:configuration services idmap (uncommitted)> set windomain=demo.domain.com
hostname:configuration services idmap (uncommitted)> set winname=*
hostname:configuration services idmap (uncommitted)> set direction=win2unix
hostname:configuration services idmap (uncommitted)> set unixname=
hostname:configuration services idmap (uncommitted)> set unixtype=user
4.
Enter
hostname:configuration services idmap (uncommitted)> commit
hostname:configuration services idmap>
You can use the list command to view the new rule in the Rules list.
hostname:configuration services idmap> list
MAPPING
idmap-000
idmap-001
Example 13
Creating a Bi-Directional Mapping (CLI)
This example creates a bi-directional name-based mapping between a Windows user and UNIX
user.
hostname:> configuration services idmap
hostname:configuration services idmap> create
hostname:configuration services idmap (uncommitted)> set
windomain=eng.fishworks.com
304
Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016
- Mapping from UNIX to Windows
unix2win
- Bidirectional mapping
bi
To create an "allow" mapping, set to the name of the UNIX identity, or
enter
to indicate all users of the specified type.
*
To create a "deny" mapping that blocks a Windows identity from
receiving the credentials of a UNIX identity, set to the name of the UNIX
identity.
To create a "deny" mapping that blocks a UNIX identity from receiving
the credentials of a Windows identity, do not set unixname.
to commit the changes and create the mapping rule.
commit
WINDOWS ENTITY
Alice@demo.domain.com
*@demo.domain.com
or
for the UNIX identity type.
user
group
DIRECTION
(U) ==
(U) =>
"" (U)
UNIX ENTITY
wdp (U)
Advertisement
Table of Contents
