Unsolved
This post is more than 5 years old
5 Posts
1
6097
March 20th, 2019 11:00
mapping User SID to UID and Group SID to GID can it be done?
Hi, help Please!
Been searching and reading PDFs for a couple days now and still seem to be missing something.
Looked at
h13115-wp-emc-isilon-onefs-multiprotocol-security-untangled.pdf
h12417-wp-isilon-onefs-user-mapping.pdf
and the Multiprotocol blogs in https://community.emc.com/community/products/isilon.
I'm trying to create a rule that maps a user SID and Group SID to respective UID and GID.
I see how to do it for a specific user or user between LDAP and other providers but nothing that tells me how to enable mappings like this.
http://doc.isilon.com/onefs/8.1.0/help/en-us/#ifs_c_mapping_unix_ids_to_windows_ids.html
The ID mapping service creates temporary UID-to-SID and GID-to-SID mappings only if a mapping does not already exist. The UNIX SIDs that result from these mappings are never stored on disk.
UIDs and GIDs have a set of predefined mappings to and from SIDs.
If a UID-to-SID or GID-to-SID mapping is requested during authentication, the ID mapping service generates a temporary UNIX SID in the format S-1-22-1- or S-1-22-2- by applying the following rules:
- For UIDs, the ID mapping service generates a UNIX SID with a domain of S-1-22-1 and a resource ID (RID) matching the UID. For example, the UNIX SID for UID 600 is S-1-22-1-600.
- For GIDs, the ID mapping service generates a UNIX SID with a domain of S-1-22-2 and an RID matching the GID. For example, the UNIX SID for GID 800 is S-1-22-2-800.
0 events found


Scotrn
5 Posts
0
March 21st, 2019 05:00
T1 support says it cannot be done but the sentence before that was, 'I've never seen usermapping in Isilon' so...
Considering manually creating a SID - UID mapping file until we get it figured out but Intelligent Isilon support is MIA on this.
Am I completely missing something?