Mapping UNIX and Windows user names

If your site has both Windows and UNIX user accounts, you should use name mapping to ensure that Windows users can access files with UNIX file permissions and to ensure that UNIX users can access files with NTFS file permissions. Name mapping can involve any combination of implicit mapping, conversion rules, and default users.

1. Decide on a method of name mapping—name mapping conversion rules, default user mappings, or both—by considering the following factors:

   • Conversion rules use regular expressions to convert one user name to another, which is useful if you want to control or track access at an individual level.

     For example, you can map UNIX users to Windows users in a domain, and vice versa.

   • Default users enable you to assign a user name to all users who are not mapped by implicit mappings or name mapping conversion rules.

     Each SVM has a default UNIX user named pcuser but does not have a default Windows user.

2. Navigate to the SVMs window.
3. Select the SVM that you want to configure.
4. Click the SVM Settings tab.
5. Optional: Create a name mapping that converts UNIX user accounts to Windows user accounts, and vice versa:
   1. In the Host Users and Groups pane, click Name Mapping.
   2. Click Add, retain the default Windows to UNIX direction, and then create a regular expression that produces a UNIX credential when a Windows user tries to access a file that uses UNIX file permissions.

      Example

      Use the following entry to convert any Windows user in the ENG domain into a UNIX user of the same name. The pattern ENG\\(.+) finds any Windows user name with the prefix ENG\\, and the replacement \1 creates the UNIX version by removing everything except the user name.
      
      
      
   3. Click Add, select the UNIX to Windows direction, and then create the corresponding mapping that produces a Windows credential when a UNIX user tries to access a file that has NTFS file permissions.

      Example

      Use the following entry to convert every UNIX user into a Windows user of the same name in the ENG domain. The pattern (.+) finds any UNIX name, and the replacement ENG\\\1 creates the Windows version by inserting ENG\\ before the user name.
      
      
      
   4. Because the position of each rule determines the order in which the rules are applied, you should review the result and confirm that the order matches your expectations.
      
      
      
   5. Repeat steps b through d to map all of the domains and names on the SVM.
6. Optional: Create a default Windows user:
   1. Create a Windows user account in LDAP, NIS, or the local users of the SVM.

      If you use local users, you can create an account under Windows in the Host Users and Groups pane.
   2. Set the default Windows user by selecting NFS > Edit in the Protocols pane, and entering the user name.

   Example

   You can create a local Windows user named unixusers and set it as the default Windows user.
7. Optional: Configure the default UNIX user if you want a user different from the default value, which is the pcuser user.
   1. Create a UNIX user account in LDAP, NIS, or the local users of the SVM.

      If you use local users, you can create an account under UNIX in the Host Users and Groups pane.
   2. Set the default UNIX user by selecting CIFS > Options in the Protocols pane, and entering the user name.

   Example

   You can create a local UNIX user named winusers and set it as the default UNIX user.