Unsolved

This post is more than 5 years old

5 Posts

6097

March 20th, 2019 11:00

mapping User SID to UID and Group SID to GID can it be done?

Hi, help Please!

 Been searching and reading PDFs for a couple days now and still seem to be missing something. 

Looked at 

h13115-wp-emc-isilon-onefs-multiprotocol-security-untangled.pdf 

h12417-wp-isilon-onefs-user-mapping.pdf

and the Multiprotocol blogs in https://community.emc.com/community/products/isilon. 

I'm trying to create a rule that maps a user SID and Group SID to respective UID and GID. 

I see how to do it for a specific user or user between LDAP and other providers but nothing that tells me how to enable mappings like this. 

http://doc.isilon.com/onefs/8.1.0/help/en-us/#ifs_c_mapping_unix_ids_to_windows_ids.html

The ID mapping service creates temporary UID-to-SID and GID-to-SID mappings only if a mapping does not already exist. The UNIX SIDs that result from these mappings are never stored on disk.

UIDs and GIDs have a set of predefined mappings to and from SIDs.

If a UID-to-SID or GID-to-SID mapping is requested during authentication, the ID mapping service generates a temporary UNIX SID in the format S-1-22-1-  or S-1-22-2-  by applying the following rules:

  •  For UIDs, the ID mapping service generates a UNIX SID with a domain of S-1-22-1 and a resource ID (RID) matching the UID. For example, the UNIX SID for UID 600 is S-1-22-1-600.
  •  For GIDs, the ID mapping service generates a UNIX SID with a domain of S-1-22-2 and an RID matching the GID. For example, the UNIX SID for GID 800 is S-1-22-2-800.
 

5 Posts

March 21st, 2019 05:00

T1 support says it cannot be done but the sentence before that was, 'I've never seen usermapping in Isilon'  so... 

Considering manually creating a SID - UID mapping file until we get it figured out but Intelligent Isilon support is MIA on this. 

Am I completely missing something?   

 

0 events found

No Events found!

Top