RE: [nfsv4] Name Mappings for NFSv4 in Active Directory

I have seen that.  Is document describes a way of providing that same
functionality (minus the communication piece) by placing this in active
directory.
This would allow:
	-foreign security principals to have group information associated
with them.  You could add a foreign security principal into a local
active directory group.
	-provides long term storage for a mapping of UID/GID to nfsv4 names.
This is useful if file systems are replicated, or written to long-term
backup mechanisms.
	-on the fly creation of UIDS/GIDS. (they would have be synchronized
with the directory service).

-dan
-----Original Message-----
From: Nicolas Williams [mailto:Nicolas.Williams@sun.com] 
Sent: Wednesday, October 08, 2003 3:50 PM
To: Wachdorf, Daniel R
Cc: nfsv4@ietf.org
Subject: Re: [nfsv4] Name Mappings for NFSv4 in Active Directory

Please see:

http://www.ietf.org/internet-drafts/draft-williams-nfsv4-ace-mapping-01.txt

This draft describes:

 - how to map user|group@domain names from multiple domains to UIDs/GIDs
   in one domain

    - including how to deal with foreign domain name reuse

 - how to do this on demand (as opposed to having to have meta-directory
   style synchronization)

 - how to make such mappings consistent to any of: a single host, a
   cluster of hosts, an entire domain

 - a new Kerberos V authorization data type that lists a principal's
   NFSv4-style user@domain and group@domain name lists

Cheers,

Nico

On Wed, Oct 08, 2003 at 03:34:57PM -0600, Wachdorf, Daniel R wrote:
> I have been working with CITI on finding a way to use Active Directory to
> use map NFSv4 names into active directory user accounts.
> I wrote a document that describes a scheme to map NFSv4 names and
> authentication principals into an Active Directory Domain.  
> I would be interested in what the members of the list thought.  Thanks.
> 
> -dan
> 
> --------------------------------------
> Daniel Wachdorf
> drwachd@sandia.gov
> Sandia National Laboratories
> System Security Research and Integration
> 505-284-8060
> 
> 
> 
> 

_______________________________________________
nfsv4 mailing list
nfsv4@ietf.org
https://www1.ietf.org/mailman/listinfo/nfsv4