NetApp
Cluster-Mode System Manager Help : Cluster-Mode : Vservers > Local Users and Groups > Name Mapping : Rules for Windows-UNIX name mappings
Rules for Windows-UNIX name mappings
Certain rules apply to Windows-UNIX name mappings.
The following rules and recommendations apply to Windows-UNIX name mappings:
•
A file's attributes specify a single domain, shared by the owning user and group. Thus, the file's user and group must come from the same domain.
•
NFS credentials can never map to nonzero Data ONTAP domains. Thus, an NFS user can never get an untranslatable CIFS user's file access permissions.
•
There is no facility for adjusting file ownerships after the translation rules have been adjusted. Changes to the translation rules can cause preexisting files now owned by invalid users—that is, CIFS users that are now translated to NIS users—to be inaccessible. For this reason, it is important to set up any desired translations before users begin creating files.
•
Generally, all CIFS users are member of the your_domain\Domain Users group. It is convenient to create an NIS group (for instance, cifs_user) that maps to and from Domain Users.
•
If an NFS user is logged in as UID 0 (root) without Kerberos authentication, the user is mapped to -2/-2 (nobody/nobody). Because Kerberos-enabled clients must be explicitly set up to map to root, this does not affect Kerberos-enabled clients.