Sun ZFS Storage 7320
 
Sun Storage 7210 Unified Storage System
 
Sun Storage 7410 Unified Storage System
 
Sun ZFS Storage 7420
 
Sun Storage 7310 Unified Storage System
 
Sun Storage 7110 Unified Storage System
 
Sun ZFS Storage 7120
 

PLA-Support>Sun Systems>DISK>ZFS Storage>SN-DK: 7xxx NAS
 

In this Document

Symptoms

Cause

Solution

Created from <SR 3-7971751391>

Applies to:

Symptoms

Users connecting to storage using Windows clients got access denied when attempting to connect to a share.  Users could access the share via their Unix systems.

The customer had configured the share to manage access by group id.   User authentication by user id was provided by Active Directory.  Group membership was provided by a Unix ldap server, the group id was not configured in Active Directory.  The groupid chosen to manage the share was not the primary group id of the users.

Permissions on the mounted file system from a unix host were:

# ls -Vd /mnt
drwxrwx---   5 ptest    tstgrp         6 Dec  1 23:59 /mnt
                 owner@:rwxp-DaARWcCos:-------:allow
                 group@:rwxp-DaARWc--s:-------:allow
              everyone@:------a-R-c--s:-------:allow

id -a username run on a Solaris client using the same ldap server showed group membership in the testgrp.

# id -a ptest
uid=44401(ptest) gid=100(staff) groups=100(staff),1234(tstgrp)

Cause

The system had no way to associate the Windows userid with the Unix userid for the ldap lookup on the ldap server.  The appliance will look up the group in ldap but must be able to check the group membership based on the Unix userid.

Solution

No change in permissions were required.

Created an idmap entry to map the Windows user id to Unix user id.

This allowed the appliance to confirm group membership for the user via the Unix ldap server.

This solution has no attachment