Users in Administrators group are mapped to pcuser
Applies to
ONTAP 9
Issue
- The user in Administrators gourp don't have the permission to write file in a Unix security-style qtree.
- The configuration of name-mapping as below which maps Administrator to Root manually.
Cluster::> vserver name-mapping show -vserver SVM1 -direction win-unix
Vserver: SVM1
Direction: win-unix
Position Hostname IP Address/Mask
-------- ---------------- ----------------
1 - - Pattern: U\\Administrator Replacement: root
2 - - Pattern: U\\(.*) Replacement: \1
2 entries were displayed.
- However, the user in Administrators group is mapped as pcuser.
Cluster::*> secd authentication show-creds -node Node01 -vserver SVM1 -win-name user1
UNIX UID: pcuser <> Windows User: U\user1(Windows Domain User)
GID: pcuser
Supplementary GIDs:
pcuser
Primary Group SID: U\Domain Users (Windows Domain group)
Windows Membership:
U\Domain Admins (Windows Domain group)
U\Domain Users (Windows Domain group)
U\Denied RODC Password Replication Group (Windows Alias)
BUILTIN\Administrators (Windows Alias)
BUILTIN\Users (Windows Alias)
User is also a member of Everyone, Authenticated Users, and Network Users
Privileges (0x22b7):
SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege
SeSecurityPrivilege
SeChangeNotifyPrivilege