[gpfsug-discuss] CES file authentication - bind account deleted?

[z.han at imperial.ac.uk]

Files owned by "joebloggs" will be owned by the user's
uid and gid. Assuming those ids aren't recycled, then
there shouldn't be any impact on file authentication,
right? It's a different matter if the ids are recycled
by AD.


Kind regards,

Zong-Pei
--------------------------------------------
   Zong-Pei Han (BSc MSc PhD)
   UK MED-BIO Data Systems Administrator
   Room 126, Sir Alexander Fleming Building
   South Kensington Campus
   Imperial College London, SW7 2AZ
--------------------------------------------


On Tue, 4 Sep 2018, Sobey, Richard A wrote:
> Date: Tue, 4 Sep 2018 08:44:59 +0000
> From: "Sobey, Richard A" <r.sobey at imperial.ac.uk>
> Reply-To: gpfsug main discussion list <gpfsug-discuss at spectrumscale.org>
> To: "'gpfsug-discuss at spectrumscale.org'" <gpfsug-discuss at spectrumscale.org>
> Subject: [gpfsug-discuss] CES file authentication - bind account deleted?
> 
> 
> Hi all,
> 
>  
> 
> I don’t like using long subject lines as a rule so it probably doesn’t make sense, but consider:
> 
>  
> 
> FILE access configuration : AD
> 
> PARAMETERS               VALUES
> 
> -------------------------------------------------
> 
> ENABLE_NFS_KERBEROS      true
> 
> SERVERS                  domaincontroller.ic.ac.uk
> 
> USER_NAME                joebloggs at IC.AC.UK
> 
> NETBIOS_NAME             store
> 
> IDMAP_ROLE               master
> 
> IDMAP_RANGE              10000000-299999999
> 
> IDMAP_RANGE_SIZE         1000000
> 
> UNIXMAP_DOMAINS          IC(500 - 2000000)
> 
> LDAPMAP_DOMAINS          none
> 
>  
> 
> If “joebloggs” was to leave the organization and that account deleted from Active Directory, what is the impact on file
> authentication in CES?
> 
>  
> 
> Thanks
> 
> Richard
> 
> 
>