Types Of Mappings; Explicit Mappings; Simple Mappings; Squashed Mappings - HP ProLiant 300 Series Administration Manual

NOTE:
User mapping is not designed to address existing user database problems in the existing environment. All
UIDs and GIDs must be unique across all NIS (Network Information Service) domains and all user names
must be unique across all Windows NT domains.
The storage server supports mappings between one or more Windows domains and one or more NIS
domains. The mappings can be set up in the Services for NFS management console by clicking the
simple mappings Add button, and then selecting the Windows domain names and the corresponding
NIS domains.

Types of mappings

There are three types of mappings. These mappings are listed below in order of the most complex (with
the greatest level of security) to the least complex (easiest to manage, but with little security):
•

Explicit mappings

•

Simple mappings

•

Squashed mappings

Explicit mappings
Explicit mappings are created by the administrator to link Windows and UNIX users. They override
simple mappings and are used to map users on the different systems that have unique names.
Simple mappings
Simple mapping is a direct comparison of user names on the Windows system and the UNIX system. If
the names match, the user is assumed to be authentic, and appropriate share access is granted. Simple
mapping is an option that the administrator must turn on if it is to be used.
Squashed mappings
If the NFS server does not have a corresponding UID or GID or if the administrator has set other
conditions to filter out the user, a process called squashing takes effect. Squashing is the conversion of an
unmapped or filtered user to an anonymous user. This anonymous user has very restricted permissions
on the system. Squashing helps administrators manage access to their exports by allowing them to
restrict access to certain individuals or groups and to squash all others down to restricted (or no) access.
Squashing enables the administrator to allow permissions instead of denying access to all the individuals
who are not supposed to have access.
Figure 77 is a diagram showing an example of how the mapping server works for an ls -al command.
HP ProLiant Storage Server administration guide 145