Creating a Mapping Rule (CLI)
4.
Complete the remaining fields according to the selected mapping type.
■ Allow mapping:
■
Mapping Direction - Choose a direction.
■
Windows Domain - Type the Active Directory domain of the Windows identity, or
select All.
■
Windows Identity - Type the name of the Windows identity.
■
Unix Identity - Type the name of the UNIX identity.
■
Unix Identity Type - Select either User or Group.
■ Deny mapping:
a.
For Mapping Direction, choose one of the two options.
■
Block Windows identity mapping - Prevents a Windows identity from gaining
the credentials of a UNIX identity
■
Block Windows identity mapping - Prevents a UNIX identity from gaining the
credentials of a Windows identity
b.
Enter the Windows or UNIX identity information.
■
If you selected Block Windows identity mapping, type the Windows
domain and identity you want to block.
■
If you selected Block UNIX identity mapping, type the UNIX identity
and identity type you want to block.
5.
Click ADD.
The new mapping appears in the Rules list.
Related Topics
■
“Mapping Rule Directional Symbols” on page 310
Creating a Mapping Rule (CLI)
Use the following procedure to grant or deny credentials for specific users through the identity
mapping service. An "allow" mapping rule grants Windows identity credentials from a UNIX
identity or vice versa. A "deny" mapping rule blocks a Windows identity from receiving the
credentials of a UNIX identity or vice versa.
302 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016