Flushing Mappings from the Cache (CLI)
You can create a rule to match strings that differ only in case. For example, you can create
a user-specific mapping to map the Windows user "JSmith@some.domain" to UNIX user
"jSmith". Otherwise, the service assigns an ephemeral ID to the Windows user.
■
For a UNIX-to-Windows mapping to produce a match, the case does not have to match.
For example, UNIX user name "jsmith" matches any Windows user name with the letters
"JSMITH" regardless of case.
Mapping Rule Directional Symbols
After creating a name-based mapping, the following symbols indicate the semantics of each
rule.
■
- Maps Windows identity to UNIX identity and UNIX identity to Windows identity
■
- Maps Windows identity to UNIX identity
■
- Maps UNIX identity to Windows identity
■
- Prevents Windows identity from obtaining credentials
■
- Prevents UNIX identity from obtaining credentials
If an icon is gray instead of black, the rule matches a UNIX identity that cannot be resolved.
DNS Configuration
The DNS (Domain Name Service) client provides the ability to resolve IP addresses to
hostnames and vice versa, and can be enabled or disabled. Optionally, secondary hostname
resolution via NIS and/or LDAP, if configured and enabled, may be requested for hostnames
and addresses that cannot be resolved using DNS. Hostname resolution is used throughout
the appliance user interfaces, including in Logs to indicate the location from which a user
performed an auditable action and in Analytics to provide statistics on a per-client basis.
To configure DNS, see the following sections:
■
“Configuring DNS (CLI)” on page 311
■
“DNS Properties and Logs” on page 311
■
“Active Directory and DNS” on page 312
■
“Non-DNS Resolution” on page 312
■
“DNS-Less Operation” on page 313
310 Oracle ZFS Storage Appliance Administration Guide, Release OS8.6.x • September 2016
To Next Page
Loading...
Need help?
General
