Hi everybody,
first thanks very much! I have learned some new things about mixed security style and about the CIFS-access to a filer as well.
Everything is working fine now with the wafl-default user pcuser.
Best Regards
Jochen
-----Original Message----- From: Fox, Adam [mailto:Adam.Fox@netapp.com] Sent: Tuesday, July 24, 2007 4:55 PM To: Willeke, Jochen; tmac Cc: toasters@mathworks.com Subject: RE: usermapping UNIX <-> NT
Like TMAC said, every Windows SID must map to a UNIX uid for CIFS to work. The point of the default user is to provide a uid for users that don't have a map to a valid UNIX user (e.g. there are no UNIX users in the environment). If you run cifs sessions, or use wcc you will see the Windows -> UNIX mappings. Those which match the default user are SIDs that did not map to a UNIX UID. This isn't necessarily a problem unless you need a different UID to be written to the metadata (i.e for multi protocol access)
-- Adam Fox adamfox@netapp.com
-----Original Message----- From: Willeke, Jochen [mailto:Jochen.Willeke@wincor-nixdorf.com] Sent: Tuesday, July 24, 2007 9:29 AM To: tmac Cc: toasters@mathworks.com Subject: RE: usermapping UNIX <-> NT
Hi,
we have a directory service which is our AD, but only for windows. But maybe this is not enough....
Do we need a special one for the unix side, too??
Rgds
Jochen
-----Original Message----- From: tmac [mailto:tmacmd@gmail.com] Sent: Tuesday, July 24, 2007 3:13 PM To: Willeke, Jochen Subject: Re: usermapping UNIX <-> NT
IF you are not using a name service (like LDAP or NIS), then yes it is expected.
Every CIFS SID must map to some UNIX UID. If you look at your password file, you probably have at least the "pcuser" in there, which may even be 65534.
From your original post, I would say this is the case.
Either install a name service, or create a password file:
username::UID:GID:::
That is all you need unless you want to get fancy with FTP or something. You may need to terminate current CIFS sessions to force them to re-authenticate properly.
On 7/24/07, Willeke, Jochen Jochen.Willeke@wincor-nixdorf.com wrote:
Hi colleagues,
i found out something strange...
After setting wafl.default_nt_user "" i ended up, that no User from Windows was able to access shares,
because
it seems that the filer maps every user from our Domain to "pcuser".
I was never aware of that fact....Is this correct behaviour??
Rgds
Jochen
-----Original Message----- From: owner-toasters@mathworks.com
[mailto:owner-toasters@mathworks.com]
On Behalf Of Willeke, Jochen Sent: Monday, July 23, 2007 3:17 PM To: toasters@mathworks.com Subject: FW: usermapping UNIX <-> NT
Hi,
wafl.default_nt_user
was it....
No set it to wafl.default_nt_user ""
and it is working lika a charm :D
Rgds and thanks to all
Jochen
-----Original Message----- From: Parisi, Justin [mailto:Justin.Parisi@netapp.com] Sent: Monday, July 23, 2007 3:02 PM To: Willeke, Jochen Subject: RE: usermapping UNIX <-> NT
Check your options for mappings from PC users - options cifs.guest_account and options wafl.default_nt_user - you may have nobody as an entry in one of those options...
-----Original Message----- From: Willeke, Jochen [mailto:Jochen.Willeke@wincor-nixdorf.com] Sent: Monday, July 23, 2007 7:02 AM To: toasters@mathworks.com Subject: usermapping UNIX <-> NT
Hi toasters,
we currently have a strange problem. We have setup a volume with mixed
security style and exports and CIFS shares on it. I have made an entry
in the usermap.cfg like this
Domain\jochen.willeke == utest
In filers local passwd utest has UID 1234 (only for a test). Mapping checked with wcc seems to work well, but when i create a
folder
from the windows side with my user jochen.willeke and then check with "ls -n" from a unix host, it shows me the UID and group ID from nobody
(65534).
Has anybody an idea where my mistake is??
Best Regards and thanks in advance
Jochen
-- --tmac
RedHat Certified Engineer