Skip to main content

vserver group-mapping create

Create a group mapping

Availability: This command is available to cluster and Vserver administrators at the admin privilege level.

Description​

The vserver group-mapping create command creates a group mapping. Group mappings are applied in the order in which they occur in the priority list; for example, a group mapping that occurs at position 2 in the priority list is applied before a group mapping that occurs at position 3. Each mapping direction (Kerberos-to-UNIX, Windows-to-UNIX, and UNIX-to-Windows) has its own priority list. Data ONTAP prevents you from creating two group mappings with the same pattern.

Patterns can be expressed as POSIX regular expressions. For information about regular expressions, see the UNIX reference page for regex(7).

Each Vserver can have up to 1024 group mappings in each direction.

The vserver group-mapping create command is not supported on Vservers with FlexVol volumes.

Note
If you are using the CLI, you must delimit all regular expressions with double quotation marks ("). For instance, to enter the regular expression (.+) in the CLI, type "(.+)" at the command prompt. To add a "?" to the expression, press ESC followed by the "?".

Parameters​

-vserver <vserver name> - Vserver
This parameter specifies the Vserver on which you want to create the group mapping.
-direction {krb-unix|win-unix|unix-win} - Name Mapping Direction
This parameter specifies the direction of the group mapping. Possible values are krb-unix for a Kerberos-to-UNIX group mapping, win-unix for a Windows-to-UNIX group mapping, and unix-win for a UNIX-to-Windows group mapping.
-position <integer> - Position
This parameter specifies the group mapping's position in the priority list. Specify the position as a positive integer.
Note
If you want to create a new group mapping at a position that is already occupied in the priority list, use the vserver group-mapping insert command instead of the vserver group-mapping create command.
-pattern <text> - Pattern
This parameter specifies the pattern you want to match. Refer to the command description section for details. The pattern can be up to 256 characters in length.
-replacement <text> - Replacement
This parameter specifies the replacement pattern. The replacement pattern can be up to 256 characters in length.

Examples​

The following example creates a group mapping on a Vserver named vs1. The mapping is from UNIX to Windows at position 5 in the priority list. The mapping maps the pattern cifs to the replacement EXAMPLE\Domain Groups. 

cluster1::> vserver group-mapping create -vserver vs1 -direction unix-win -position 5 -pattern cifs -replacement "EXAMPLE\\Domain Groups"
Related reference