Oracle ZFS Storage Appliance User Manual

Creating a Mapping Rule (CLI)
Note - if you create a mapping rule that blocks a particular user and the user's name then
changes, the mapping no longer blocks that user.
Before You Begin
Configure rule-based mapping as described in “Configuring Identity Mapping
(CLI)” on page 300.
1.
Go to configuration services idmap.
2.
Enter create.
hostname:configuration services idmap> create
hostname:configuration services idmap (uncommitted)>
3.
Set the properties appropriately.
You can use the list command to view the available properties.
hostname:configuration services idmap (uncommitted)> list
Properties:
windomain = (unset)
winname = (unset)
direction = (unset)
unixname = (unset)
unixtype = (unset)
a.
windomain - Active Directory domain of the Windows identity.
b.
winname - Set to one of the following options.
■
To create an "allow" mapping, set winname to the name of the Windows
identity.
Enter * to indicate all users within the specified domain.
■ To create a "deny" mapping that blocks a UNIX identity from receiving
the credentials of a Windows identity, set to the name of the Windows
identity.
■ To create a "deny" mapping that blocks a Windows identity from
receiving the credentials of a UNIX identity, do not set winname.
c.
direction - Set to the direction of the mapping:
■
win2unix - Mapping from Windows to UNIX
Appliance Services 303

Oracle ZFS Storage Appliance Specifications

General

Connectivity	10GbE, 40GbE, InfiniBand, Fibre Channel
Protocols	NFS, SMB, iSCSI, Fibre Channel, HTTP
Operating System	Oracle Solaris
Data Protection	snapshots, clones, remote replication
Data Reduction	Inline compression, deduplication
High Availability	Redundant hardware components (controllers, power supplies, fans). Automatic failover between controllers. Hot-swappable drives and components. Cluster configurations for increased availability and scalability.
Management Interface	Web-based GUI, CLI, REST API
Storage Type	Hybrid (SSD + HDD), All-Flash
Storage Capacity	Up to several petabytes
Encryption	AES-256 encryption at rest