<html>
<head>
<meta http-equiv="Content-Type" content="text/html; charset=utf-8">
</head>
<body>
<p>Hi,</p>
<p>you can compare the mapping between the 2 clusters:<br>
</p>
<p>/usr/lpp/mmfs/bin/net idmap dump | grep RANGE | sort<br>
</p>
<p>We had an issue when migrating from Samba to CES, our domain had to be first (before ALLOC) to have the same uid mappings. We changed the order by deleting them and adding them in the correct order:<br>
</p>
<p>/usr/lpp/mmfs/bin/net idmap delete range 0<br>
/usr/lpp/mmfs/bin/net idmap delete range 1<br>
/usr/lpp/mmfs/bin/net idmap delete range 2<br>
</p>
<p>/usr/lpp/mmfs/bin/net idmap set range 0 S-1-5-.........<br>
/usr/lpp/mmfs/bin/net idmap set range 1 ALLOC<br>
/usr/lpp/mmfs/bin/net idmap set range 2 S-1-.........</p>
<p>kind regards<br>
Pieter Adams</p>
<p><br>
</p>
<div class="moz-cite-prefix">On 20/03/2023 13:52, Laurence Horrocks-Barlow wrote:<br>
</div>
<blockquote type="cite" cite="mid:b3f96c9b18c8f8.ec06f170bb9ab@qsplace.co.uk">
<table style="cellpadding:0;border:0;cellspacing:0;display:table;width:100%;table-layout:fixed;border-collapse:seperate;float:none;" width="100%" cellspacing="0" cellpadding="0" border="0" align="left">
<tbody style="display:block;">
<tr>
<td cellpadding="7px 2px 7px 2px" style="padding:7px 2px 7px
2px;background-color:#A6A6A6;valign:middle" width="1px" valign="middle" bgcolor="#A6A6A6">
<br>
</td>
<td cellpadding="7px 5px 7px 15px" color="#212121" style="width:100%;background-color:#EAEAEA;padding:7px 5px
7px 15px;font-family:wf_segoe-ui_normal,Segoe UI,Segoe
WP,Tahoma,Arial,
sans-serif;font-size:12px;font-weight:normal;color:#212121;text-align:left;word-wrap:break-word;" width="100%" valign="middle" bgcolor="#EAEAEA">
<div>U ontvangt niet vaak e-mail van <a class="moz-txt-link-abbreviated" href="mailto:laurence@qsplace.co.uk">
laurence@qsplace.co.uk</a>. <a href="https://aka.ms/LearnAboutSenderIdentification" moz-do-not-send="true">
Meer informatie over waarom dit belangrijk is</a></div>
</td>
<td cellpadding="7px 5px 7px 5px" color="#212121" style="width:75px;background-color:#EAEAEA;padding:7px 5px
7px 5px;font-family:wf_segoe-ui_normal,Segoe UI,Segoe
WP,Tahoma,Arial,
sans-serif;font-size:12px;font-weight:normal;color:#212121;text-align:left;word-wrap:break-word;align:left" width="75px" valign="middle" bgcolor="#EAEAEA" align="left">
<br>
</td>
</tr>
</tbody>
</table>
<div>
<div>
<div id="compose-body-wrapper" dir="auto">
<div dir="auto">Just to confirm, is it just the mapping? Or the actual UID/GID’s being different?</div>
<div dir="auto"><br>
</div>
<div dir="auto">Could you provide an example for a file on both sites?</div>
<div dir="auto"><br>
</div>
<div dir="auto">— Lauz</div>
<div dir="auto"><br>
</div>
<div dir="auto" id="tmjah_g_1299">Get <a href="https://bluemail.me" moz-do-not-send="true">
BlueMail</a> for Mobile</div>
</div>
<div class="replyHeader" dir="auto">Christoph Martin wrote:</div>
<br>
<br>
<div>
<blockquote cite="mid:ae59043b-9849-6c2a-2af7-a59413efae36@uni-mainz.de" type="cite" style="margin:0 0 0 .8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div>Hi list,</div>
<div><br>
</div>
<div>we have a cluster running with SMB and NFS service and winbind </div>
<div>userid/groupid mappings. The primary domain takes the userid/groupid </div>
<div>mapping from AD:</div>
<div><br>
</div>
<div>ENABLE_NFS_KERBEROS true</div>
<div>SERVERS "*"</div>
<div>USER_NAME ISS$</div>
<div>NETBIOS_NAME ISS</div>
<div>IDMAP_ROLE master</div>
<div>IDMAP_RANGE 10000000-299999999</div>
<div>IDMAP_RANGE_SIZE <a href="tel:10000000" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="0" moz-do-not-send="true">
10000000</a></div>
<div>UNIXMAP_DOMAINS UNI-MAINZ(1000-9999999:unix)</div>
<div>LDAPMAP_DOMAINS none</div>
<div><br>
</div>
<div>All trusted domains get automatically mapped to regions over <a href="tel:10000000" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="1" moz-do-not-send="true">
10000000</a>.</div>
<div><br>
</div>
<div>Now we are setting up a second cluster as AFM DR site and want to be </div>
<div>able to use SMB and NFS with the same user mapping. For the primary </div>
<div>domain UNI-MAINZ this is working because of the explicit entries of </div>
<div>uid/gid in AD. But he trusted domains get mapped to different regions of </div>
<div>uids. So we have userid/groupid missmatch between these two clusters.</div>
<div><br>
</div>
<div>I think this is because winbind will assign the regions depending on a </div>
<div>first come first serve rule.</div>
<div><br>
</div>
<div>Is there a way to get the same mapping on these two clustered?</div>
<div>Can we e.g. copy a smb/binbind tdb database to get the same mapping?</div>
<div><br>
</div>
<div>Regards</div>
<div>Christoph</div>
<div><br>
</div>
<div>-- </div>
<div>Christoph Martin</div>
<div>Zentrum für Datenverarbeitung (ZDV)</div>
<div>Leiter Unix & Cloud</div>
<div><br>
</div>
<div>Johannes Gutenberg-Universität Mainz</div>
<div>Anselm Franz von <a href="x-apple-data-detectors://4/0" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="address" x-apple-data-detectors-result="4/0" style="color:
currentcolor; text-decoration-color: rgba(128, 128,
128, 0.38);" moz-do-not-send="true">
Bentzel-Weg 12, 55128 Mainz</a></div>
<div>Tel: <a href="tel:+49%206131%2039%2026337" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="4/1" style="color:
currentcolor; text-decoration-color: rgba(128, 128,
128, 0.38);" moz-do-not-send="true">
+49 6131 39 26337</a></div>
<div><a href="mailto:martin@uni-mainz.de" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="4/2" style="color:
currentcolor; text-decoration-color: rgba(128, 128,
128, 0.38);" moz-do-not-send="true" class="moz-txt-link-freetext">martin@uni-mainz.de</a></div>
<div><a href="http://www.zdv.uni-mainz.de" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="4/3" style="color:
currentcolor; text-decoration-color: rgba(128, 128,
128, 0.38);" moz-do-not-send="true">www.zdv.uni-mainz.de</a></div>
</blockquote>
</div>
<div>
<blockquote cite="mid:ae59043b-9849-6c2a-2af7-a59413efae36@uni-mainz.de" type="cite" style="margin:0 0 0 .8ex;border-left:1px #ccc
solid;padding-left:1ex">
<div>Hi list,</div>
<div><br>
</div>
<div>we have a cluster running with SMB and NFS service and winbind </div>
<div>userid/groupid mappings. The primary domain takes the userid/groupid </div>
<div>mapping from AD:</div>
<div><br>
</div>
<div>ENABLE_NFS_KERBEROS true</div>
<div>SERVERS "*"</div>
<div>USER_NAME ISS$</div>
<div>NETBIOS_NAME ISS</div>
<div>IDMAP_ROLE master</div>
<div>IDMAP_RANGE 10000000-299999999</div>
<div>IDMAP_RANGE_SIZE <a href="tel:10000000" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="5" moz-do-not-send="true">
10000000</a></div>
<div>UNIXMAP_DOMAINS UNI-MAINZ(1000-9999999:unix)</div>
<div>LDAPMAP_DOMAINS none</div>
<div><br>
</div>
<div>All trusted domains get automatically mapped to regions over <a href="tel:10000000" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="6" moz-do-not-send="true">
10000000</a>.</div>
<div><br>
</div>
<div>Now we are setting up a second cluster as AFM DR site and want to be </div>
<div>able to use SMB and NFS with the same user mapping. For the primary </div>
<div>domain UNI-MAINZ this is working because of the explicit entries of </div>
<div>uid/gid in AD. But he trusted domains get mapped to different regions of </div>
<div>uids. So we have userid/groupid missmatch between these two clusters.</div>
<div><br>
</div>
<div>I think this is because winbind will assign the regions depending on a </div>
<div>first come first serve rule.</div>
<div><br>
</div>
<div>Is there a way to get the same mapping on these two clustered?</div>
<div>Can we e.g. copy a smb/binbind tdb database to get the same mapping?</div>
<div><br>
</div>
<div>Regards</div>
<div>Christoph</div>
<div><br>
</div>
<div>-- </div>
<div>Christoph Martin</div>
<div>Zentrum für Datenverarbeitung (ZDV)</div>
<div>Leiter Unix & Cloud</div>
<div><br>
</div>
<div>Johannes Gutenberg-Universität Mainz</div>
<div>Anselm Franz von <a href="x-apple-data-detectors://9/0" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="address" x-apple-data-detectors-result="9/0" style="color:
currentcolor; text-decoration-color: rgba(128, 128,
128, 0.38);" moz-do-not-send="true">
Bentzel-Weg 12, 55128 Mainz</a></div>
<div>Tel: <a href="tel:+49%206131%2039%2026337" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="telephone" x-apple-data-detectors-result="9/1" style="color:
currentcolor; text-decoration-color: rgba(128, 128,
128, 0.38);" moz-do-not-send="true">
+49 6131 39 26337</a></div>
<div><a href="mailto:martin@uni-mainz.de" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="9/2" style="color:
currentcolor; text-decoration-color: rgba(128, 128,
128, 0.38);" moz-do-not-send="true" class="moz-txt-link-freetext">martin@uni-mainz.de</a></div>
<div><a href="http://www.zdv.uni-mainz.de" dir="ltr" x-apple-data-detectors="true" x-apple-data-detectors-type="link" x-apple-data-detectors-result="9/3" style="color:
currentcolor; text-decoration-color: rgba(128, 128,
128, 0.38);" moz-do-not-send="true">www.zdv.uni-mainz.de</a></div>
</blockquote>
</div>
</div>
</div>
<br>
<fieldset class="moz-mime-attachment-header"></fieldset>
<pre class="moz-quote-pre" wrap="">_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at gpfsug.org
<a class="moz-txt-link-freetext" href="http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org">http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org</a>
</pre>
</blockquote>
<br>
<div style="font-size:9pt; font-family: 'Calibri',sans-serif;">-- Disclaimer --<br>
Vlaamse Radio- en Televisieomroeporganisatie<br>
Auguste Reyerslaan 52<br>
1043 Brussel</div>
<br>
<div style="font-size:9pt; font-family: 'Calibri',sans-serif;">nv van publiek recht<br>
BTW BE 0244.142.664<br>
RPR Brussel<br>
<span style="padding-top:10px; font-weight:bold; color:#CC0000; font-size:10pt; font-family: 'Calibri',Arial,sans-serif; "><a href="http://www.vrt.be/gebruiksvoorwaarden ">VRT Gebruikersvoorwaarden
</a></span><br>
<br>
</div>
</body>
</html>