How does "auth-sys-extended-groups" differ from normal operations?
Applies to
- ONTAP 9
- NFS
- AUTH-SYS-EXTENDED-GROUPS
Answer
- For an NFS server configured to use
auth-sys-extended-groups
, ONTAP will strip the aux GID(s) from the RPC header and query LDAP or NIS for groups associated with the UID and then build the credential from the response. - If auth-sys-extended-groups is not enabled, ONTAP will create the credential from the RPC header.
- NS-SWITCH is not consulted
- Credential cache is not consulted
- A local user and or group does not need to be configured
Additional Information
N/A