Skip to main content

Configuring default Windows user to Linux user mappings on the CIFS server

For Windows (SMB) users that do not map to a specific user in the configured Linux user directory stores (either by using implicit name mapping or by explicitly configuring a Windows to Linux user name mapping), you can configure default Windows user to Linux user mappings on the CIFS server.

  • SMB users receive Linux credentials by configuring a default Linux account (for local SMB user accounts and domain users from the home domain or trusted domains).

  • SMB users receive Linux credentials by configuring a guest Linux account (for users connecting from non-local accounts or users from non-trusted domains).

  • The home domain's Domain Administrators group receive the root account Linux credentials by enabling a CIFS server option.

  • Configuring the default Linux user
    You can configure the default Linux user to be used if all other mapping attempts fail for a user, or if you do not want to map individual users between Linux and Windows. Alternatively, if you want authentication of non-mapped users to fail, you should not configure the default Linux user.
  • Configuring the guest Linux user
    Configuring the guest Linux user option means that users who log in from untrusted domains are mapped to the guest Linux user and can connect to the CIFS server. Alternatively, if you want authentication of users from untrusted domains to fail, you should not configure the guest Linux user. The default is to not allow users from untrusted domains to connect to the CIFS server (the guest Linux account is not configured).
  • Mapping the administrators group to root
    If you have only CIFS clients in your environment and your storage virtual machine (SVM) was set up as a multiprotocol storage system, you must have at least one Windows account that has root privilege for accessing files on the SVM; otherwise, you cannot manage the SVM because you do not have sufficient user rights.