[gpfsug-discuss] Active direcotry based ACLs for Samba and Windows GPFS clients

[Peter Hruška]

Hello Jonathan,

Thank you for the answer. Since I used Automatic ID-mapping method for the mmauth deployment I didn't do anything regarding RFC2307.
I chose this approach because we don't want to use kerberos for NFS authentication (although we will use NFS for separate data access).
I'll check on that. If you have any hints I would appreciate them.


--

S přáním pěkného dne / Best regards

Mgr. Peter Hruška
IT specialista

M Computers s.r.o.
Úlehlova 3100/10, 628 00 Brno-Líšeň (mapa<https://mapy.cz/s/gafufehufe>)
T:+420 515 538 136
E: peter.hruska at mcomputers.cz<mailto:peter.hruska at mcomputers.cz>

www.mcomputers.cz<http://www.mcomputers.cz/>
www.lenovoshop.cz<http://www.lenovoshop.cz/>
[cid:c95a681f19a2dd92eac22c858b7c1d0dfa182335.camel at mcomputers.cz-0]



On Fri, 2024-03-08 at 15:50 +0000, Jonathan Buzzard wrote:
EXTERNÍ ODESÍLATEL


On 08/03/2024 13:02, Peter Hruška wrote:

Hello,

I would like to ask if there is any possible way to unify access IDs for
Samba share and GPFS client on Windows.

The model situation looks like this - we have a GPFS cluster with one
filesystem. On the filesystem we have a Samba shared directory. MMauth
is configured to Active directory for file access and works.
The Windows machine is also part of the GPFS cluster and therefore it is
able to mount the filesystem "directly" by mmmount. However the
user/group IDs that are used by this access method are not consistent
with the IDs used by Samba and access to the same data is not working well.
Is there is any solution to this situation? I tried to study the
documentation but I didn't find a clear information whether this is or
isn't possible but I also didn't find a way to unify the access.


The obvious question is to ask if your Active Directory has it's RFC
23037bis fields populated?


JAB.

--
Jonathan A. Buzzard                         Tel: +44141-5483420
HPC System Administrator, ARCHIE-WeSt.
University of Strathclyde, John Anderson Building, Glasgow. G4 0NG


_______________________________________________
gpfsug-discuss mailing list
gpfsug-discuss at gpfsug.org
http://gpfsug.org/mailman/listinfo/gpfsug-discuss_gpfsug.org
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20240308/a4302f25/attachment-0001.htm>
-------------- next part --------------
A non-text attachment was scrubbed...
Name: mcomputers_podpis_2024.png
Type: image/png
Size: 13955 bytes
Desc: mcomputers_podpis_2024.png
URL: <http://gpfsug.org/pipermail/gpfsug-discuss_gpfsug.org/attachments/20240308/a4302f25/attachment-0001.png>