Nfs User And Group Mappings; Edit Nfs Client Groups Page - HP ProLiant 300 Series Administration Manual

Figure 76 Edit NFS Client Groups page
2. To add a client to the group, enter the client name or IP address in the Client name box, and then
click Add. The client is automatically added to the Members list.
3. To delete a client from the group, select the client in the Members list, and then click Remove.
The client is removed from the list.
4. After all additions and deletions are completed, click OK.

NFS user and group mappings

When a fileserver exports files within a homogeneous environment, there are no problems with
authentication. It is a simple matter of making a direct comparison to determine whether the user should
be allowed access to the file, and what level of access to allow.
However, when a fileserver works in a heterogeneous environment, some method of translating user
access is required. User mapping is the process of translating the user security rights from one
environment to another.
User name mapping is the process of taking user and group identification from one environment and
translating it into user identification in another environment. In the context of UNIX and NFS, user and
group identification is a combination of a user ID (UID) and group ID (GID). In Windows environments,
user identification is a Security ID (SID) or, in Windows Storage Server 2003, a Globally Unique
Identifier (GUID).
The server grants or denies access to the export based on machine name or IP address. However, after
the client machine has access to the export, user-level permissions are used to grant or deny access
to user files and directories.
The storage server is capable of operating in a heterogeneous environment, meaning that it is able to work
with both UNIX and Windows clients. Because the files are stored in the native Windows NT file system,
the server has to map the UNIX users to Windows users to determine the user access level of the files.
144
Services for NFS/UNIX