The option in the NFS Export map-lookup-uid can achieve what you are trying to do here.  What that does to the User coming in from NFS client is lookup his identity (UID,GID and Supplemental Groups) from the AD instead of trusting what he provides directly over the wire. Example:  Lets say a user BOB from Unix/Linux performs "ls -l" on /nfs1 which is an export (enabled with map-lookup-uid) mounted from OneFS; OneFS will not take BOB's UID and GID that he provides over the wire; but instead look-up BOB in AD and get his identity information if AD is configured. Assumption is that AD provides UID,GID (either via SFU/RFC2307) or some other mechanism.
Hi Guys,  is there a way to setup Isilon to authenticate NFS users from AD? Is there anything that needs to be setup on AD side? I want to setup an Isilon for mixed mode, share a folder trough NFS and SMB, but use AD as authentication source for booth. Various papers covers only the usual LDAP for NFS, and AD for SMB users. OneFS 7.1.0.2 plus patch-124564 (Patch for OneFS 7.1.0.0 - 7.1.0.2. This patch addresses multiple issues with the SMB and AIMA services.)  Regards, Krisztian
Authenticate NFS users from AD