Adding CIFS users to the filer

When you add CIFS users

By default, Windows NT users who have an account map to a UNIX account of the same name. If they do not have a Windows NT account, the user becomes a generic user and uses the generic account, which is described in "Generic user accounts." In the rare case that you must add a user explicitly, you can do so with the methods described in this section.

You can add CIFS users to the filer at any time. The method you use for adding users to the filer depends on whether you are authenticating with a domain controller or the UNIX password database.

When authenticating with a domain controller

To add a user, create an account for the CIFS user within your Windows NT domain environment. If you want the user to also use UNIX files, either create an entry in the /etc/passwd file on the filer or include the user in the /etc/usermap.cfg file.

What is the /etc/usermap.cfg file?

The /etc/usermap.cfg file explicitly maps Windows NT users to the correct UNIX account and UNIX users to a Windows NT account. The file can be coded as follows:

As a text file, with non-ASCII characters encoded in the NFS character set.
As a UNICODE file created using the Windows NT tools Notepad or Microsoft Word.

The filer automatically detects which of these forms is in use.

Format of the /etc/usermap.cfg file

The format of the /etc/usermap.cfg file is a list of text records in the following format:

[IP-qual:] [NT-domain\]NTUser [direction] [IP-qual:] UnixUser

Lines are processed sequentially.

Format variables

The following table describes the variables in the /etc/usermap.cfg file description.


Variable	Description
IP-qual	An IP qualifier that the filer uses in matching a user. You use an IP qualifier to narrow a match. IP-qual can be an IP address in any of the following formats: A regular IP address specified as numbers separated by periods (dot notation) with an optional subnet address. For example, 192.4.1.0/24 narrows possible matches to the 192.4.1.0 class C subnet. A host name. A network name. A network name with a subnet specified in dot notation. For example, corpnet/255.255.255.0 specifies the corpnet subnet.
NT-domain	Specifies the domain to match or the domain to use for a mapped UNIX account. The default is the domain in which the filer is installed.
NTUser	Any user-type account name. If the name contains a space, put the name in quotation marks.
direction	Restricts the direction of the mapping. By default, mappings are bidirectional. You can use one of three symbols: => means NT to UNIX mapping only. <= means UNIX to NT mapping only. == means bidirectional mapping. Use this to explicitly indicate a bidirectional mapping.
UnixUser	A UNIX account name.

Symbol conventions

The following symbol conventions are in effect:

An asterisk (*) matches any name.
For example, to map all unmapped users to the UNIX "nobody" account, add the following line:
```
*       nobody
```
The null string ("") matches no name and rejects any user.
For example, to prevent access completely, add the following line:
```
*       ""
```
This line prevents the default mapping of Windows NT users who have an account map to a UNIX account of the same name. Any lines after this line are disregarded by the filer.
You can use either spaces or tabs as separators.

Name requirements

Windows NT and UNIX names have different requirements, as follows:

Windows NT names are case-insensitive and can contain non-ASCII characters within the character set in the current code page. Windows NT user names can contain spaces, in which case you must enclose the name in quotation marks.
UNIX user names are case-sensitive and must be in ASCII.

Default file contents

If the filer is domain authenticated, by default the /etc/usermap.cfg file contains the following line:

domain\administrator    root

When authenticating with the UNIX password database

To add a user, enter the user's information into the NIS password and group maps.

Note: If you do not use NIS, create entries for the user in the filer's /etc/passwd and /etc/group files.

Part No. 210-02334
File: cifs4.htm
Last updated: 02/24/99 12:16:32