How does name-mapping work for NFS clients accessing UNIX security style resources?
Applies to
- ONTAP 9
- UNIX
- NFS
- AUTH_SYS
Answer
- The client will send the UID and GID(s) in the RPC header for both NFSv3 and NFSv4 operations.
- The filer will grant/deny access based on the UID and GID(s) sent in the RPC header of the NFS operation.
Note: There is no user mapping that takes place during this process. ONTAP does not need to map the incoming user to a Windows user in order for an NFS client to perform operations against a UNIX security style resource.
Additional Information
- How to create and understand vserver name-mapping rules
- Understanding name-mapping in a multiprotocol environment
- While NFSv4 can leverage strings for metadata operations, access is still granted based on the credentials in the RPC header.
