Figured this out with some help from you all.

We’re running 8.1 and this option is only supported 8.1.1 and onward for :  https://communities.netapp.com/thread/20549

Confirmed it on a 8.2 simulator. Still needed to use registry walk and set to even see/set the option but it is there. Once you’ve set it, even in non-privileged mode it appears if you run options nfs.

Thanks to all!

Randy

From: toasters-bounces@teaparty.net [mailto:toasters-bounces@teaparty.net] On Behalf Of Rue, Randy
Sent: Thursday, March 27, 2014 2:02 PM
To: toasters@teaparty.net
Subject: nfs.authsys.extended_groups_ns.enable?

Hello All,

Trying to work around the 16 group limitation of NFS v3 on our 8.1 vfiler and finding references to a “hidden” option “nfs.authsys.extended_groups_ns.enable” that will effectively disable group lookups via auth_sys/RPC and instead look to the filer’s AD authentication for a user’s group memberships. This is similar in spirit to Isilon’s “mapuid” feature and “regular” NFS’s –manage-gid switch.

But I’ve tried in regular mode, priv set advanced and priv set diag, and I always get “No such option nfs.authsys.extended_groups_ns.enable” if I try to view or change the option.

Am I missing some step to make this hidden double-secret-probationary option available?

Randy