This post is more than 5 years old
1 Message
0
1789
October 20th, 2016 17:00
Set Quota for both AD and LDAP users?
I have a Isilon cluster joined to AD domain and LDAP domain simultaneously. Now I want use quota feature to give each user 1TB space, each user also joined AD and LDAP simultaneously and established mapping relations between AD user and LDAP user. I want each two related user in AD and LDAP(one in fact) share the 1TB quota, How can I do it?
0 events found
No Events found!
Peter_Sero
4 Operator
•
1.2K Posts
0
October 21st, 2016 00:00
If your id mappings are meaningful and correct, there will
be only one on-disk identity for files per 'real' user,
either Windows-stye (AD) or UNIX-style (LDAP),
depending on your actual set-up.
To check what applies to your Isilon cluster, this should be helpful:
Multiprotocol concepts series part 3: On-disk identity
For quotas it will be easy then: You need to set only one quota definition,
either for the Windows or for the UNIX user.
hth
-- Peter
RobChang-Isilon
136 Posts
0
October 22nd, 2016 10:00
Hi Tony,
First, definitely take a look at that article Peter provided.
Within that article, there's a PDF whitepaper -- http://www.emc.com/collateral/white-papers/h12417-identities-access-tokens-isilon-onefs-user-mapping-service-wp.pdf -- page 12 would interest you.
In your case, here are the steps I would perform:
1. In WebUI, under Access -> Authentication Providers, enter your AD information under Active Directory. And enter your LDAP information under LDAP.
2. Then under Access -> Access Zones, create an access zone and drop your AD and LDAP authentication providers into this access zone. Image here as an example:
3. Then you'll need to perform user mappings as outlined in page 12 of that PDF file. Do this in WebUI, under Access -> Membership & Roles -> User Mapping.
If your AD's usernames and LDAP's usernames match, things are going to be easier with the default mapping.
4. Setup your quotas in WebUI, under File System -> SmartQuotas. Create a quota of type Group Quota. Either apply it to all and future groups, or only apply the 1TB quota to the a specific group in your directory service for the access zone you just created.
Feel free to reach out with any questions.
Peter_Sero
4 Operator
•
1.2K Posts
0
October 24th, 2016 01:00
@ tony2000:
Of course the "generic" user quota also can help you
finding out whether, under your mappings in effect,
the Windows or the UNIX users get the quota accounting.
Just create the "default-user" quota, and see
which actual users show up in the quota reports
(after the QuotaScan job has finished).
Cheers
-- Peter
sluetze
2 Intern
•
300 Posts
0
October 24th, 2016 01:00
and if you have a folder per user (homefolder or stuff like that) you could also just use Directory-Quotas and don't mind the rest.
imho userquota is only useful in shared directorys
Rgds
-- sluetze