| Skip Navigation Links | |
| Exit Print View | |
 | man pages section 1M: System Administration Commands Oracle Solaris 11 Information Library |
| Skip Navigation Links | |
| Exit Print View | |
| man pages section 1M: System Administration Commands Oracle Solaris 11 Information Library |
- NFS user and group id mapping daemon
/usr/lib/nfs/nfsmapid
Thenfsmapid daemon maps to and from NFS version 4owner andowner_group identification attributes and local UID and GID numbers used by boththe NFS version 4 client and server.
nfsmapid uses thepasswd andgroup entries in the/etc/nsswitch.conf file todirect how it performs the mappings.
Thenfsmapid daemon has no external, customer-accessible interfaces. You can, however, administrativelyconfigurenfsmapid in one of the following ways:
Specify thenfsmapid_domain parameter in the SMF for NFS using thesharectl(1M) command.
Specify the_nfsv4idmapdomain DNS resource record.
The currently selected NFSv4 domain is available in the file/var/run/nfs4_domain.
Please refer to theOracle Solaris Administration: Network ServicesOracle Solaris Administration: Network Services for further details.
Thenfsmapid service is managed by the service management facility,smf(5), underthe service identifier:
svc:/network/nfs/mapid
Administrative actions on this service, such as enabling, disabling, or requesting restart,can be performed usingsvcadm(1M). The service's status can be queried using thesvcs(1) command.
If it is disabled, it will be enabled bymount_nfs(1M),share_nfs(1M), andautomountd(1M), unless itsapplication/auto_enable property is set tofalse.
nfsmapid caches a user's UID and GID. If a user subsequently changesa UID or GID, using one of the utilities listed below, thenfsmapid cache becomes stale. At this point, any NFS operation that getsor set attributes will result in the exchange of this stale information. Toresolve this situation, restartnfsmapid, as follows:
#svcadm restart svc:/network/nfs/mapid:default
The startup SMF parameter designating a domain name (nfsmapid_domain) can be manipulatedwith thesharectl(1M) command.
The setting for the NFS SMF parameternfsmapid_domain overrides the domain used bynfsmapid for building and comparing outbound and inbound attribute strings, respectively. Also, this setting overrides any other mechanism for setting the NFSv4 domain. In the absence of anfsmapid_domain setting, thenfsmapid daemon determines the NFSv4 domain as follows:
If a properly configured/etc/resolv.conf (seeresolv.conf(4)) exists,nfsmapid queries specified nameserver(s) for the domain.
If a properly configured/etc/resolv.conf (seeresolv.conf(4)) exists, but the queried name server does not have a proper record of the domain name,nfsmapid attempts to obtain the domain name through theBIND interface (seeresolver(3RESOLV)).
If no/etc/resolv.conf exists,nfsmapid falls back on using the configured domain name (seedomainname(1M)), which is returned with the leading domain suffix removed. For example, forwidgets.sales.acme.com,sales.acme.com is returned.
If/etc/resolv.conf does not exist, no domain name has been configured (or no/etc/defaultdomain exists),nfsmapid falls back on obtaining the domain name from the host name, if the host name contains a fully qualified domain name (FQDN).
If a domain name is still not obtained following all of thepreceding steps,nfsmapid will have no domain configured. This results in thefollowing behavior:
Outboundowner andowner_group attribute strings are encoded as literal ID's. For example, the UID 12345 is encoded as12345.
nfsmapid ignores thedomain portion of the inbound attribute string and performs name service lookups only for the user or group. If the user/group exists in the local system name service databases, then the proper UID/GID will be mapped even when no domain has been configured.
This behavior implies that the same administrative user/group domain exists between NFSv4client and server (that is, the same UID/GIDs for users/groups on bothclient and server). In the case of overlapping ID spaces, the inboundattribute string could potentially be mapped to the wrong id. However, this isnot functionally different from mapping the inbound string tonobody, yet providesgreater flexibility. SeeEXAMPLES, below.
The utilities that allow you to change UID and GID are:
Contains the domain name currently used by NFSv4.
Example 1 Setting Domain Name
The following command usessharectl to set the domain name.
#sharectl set -p nfsmapid_domain=sun.com nfs
Thenfsmapid_domain property is described underNOTES, below.
Example 2 Obtaining Domain Name
The following command usessharectl to obtain the current domain name.
#sharectl get -p nfsmapid_domain nfsnfsmapid_domain=sun.com
Seeattributes(5) for descriptions of the following attributes:
|
svcs(1),automountd(1M),domainname(1M),groupdel(1M),groupmod(1M),mount_nfs(1M),svcadm(1M),share_nfs(1M),sharectl(1M),userdel(1M),usermod(1M),resolver(3RESOLV),nfs(4),resolv.conf(4),attributes(5),smf(5)
Oracle Solaris Administration: Network Services
Thenfsmapid daemon might not exist in a future release of Solaris.
Copyright © 2011, Oracle and/or its affiliates. All rights reserved.Legal Notices |   |