Oracle ZFS Storage Appliance

Creating a Mapping Rule (CLI)
Note - if you create a mapping rule that blocks a particular user and the user's name then
changes, the mapping no longer blocks that user.
Before You Begin
Configure rule-based mapping as described in “Configuring Identity Mapping
(CLI)” on page 300.
1.
Go to configuration services idmap.
2.
Enter create.
hostname:configuration services idmap> create
hostname:configuration services idmap (uncommitted)>
3.
Set the properties appropriately.
You can use the list command to view the available properties.
hostname:configuration services idmap (uncommitted)> list
Properties:
windomain = (unset)
winname = (unset)
direction = (unset)
unixname = (unset)
unixtype = (unset)
a.
windomain - Active Directory domain of the Windows identity.
b.
winname - Set to one of the following options.
■
To create an "allow" mapping, set winname to the name of the Windows
identity.
Enter * to indicate all users within the specified domain.
■ To create a "deny" mapping that blocks a UNIX identity from receiving
the credentials of a Windows identity, set to the name of the Windows
identity.
■ To create a "deny" mapping that blocks a Windows identity from
receiving the credentials of a UNIX identity, do not set winname.
c.
direction - Set to the direction of the mapping:
■
win2unix - Mapping from Windows to UNIX
Appliance Services 303