Identity Mapping; Local Groups And Users; Local And Primary Groups - HP 3PAR StoreServ 7450c Planning Manual

Identity Mapping

File Persona supports RFC2307 for Active Directory. When RFC2307 is enabled, the Active
Directory (AD) service provides the GIDs and UIDs.
WARNING!
The default setting is disabled, the HP 3PAR StoreServ formulates the UIDs and GIDs for all AD
users and groups based on the Security Identifier (SID). When RFC2307 is enabled, you must
specify a unique UID for every user and a unique GID for every group in AD. If RFC2307 is enabled
and the user does not have a configured UID or GID in AD, the user is not given write access even
if they are granted access through an Access Control List (ACL).
Table 24 Identity Mapping
Item
Enable Identity Mapping (RFC2307) for the Active Directory provider
Answer: Enable or Disable
(Disable is the Default and recommended value)
If enabled, File Persona expects UIDs and GIDs to be found in Active Directory
and not formulated using the SID as is the default behavior. This allows user
to customize UIDs and GIDs. If rfc2307is enabled when the user does not
have a configured UID/GID in Active Directory, write access is prevented,
even if granted through an ACL.

Local Groups and Users

If Local users and Groups are to be used for user authentication, complete the following tables.
Valid UID and GID are in the range 1000 to 65535.
Table 25 Local Groups and Users
Local Group Name
Table 26 Local and Primary Groups
Local User Name
NOTE: The maximum number of Local User accounts supported using the local authentication
provider is 200. However, the optimal number of user accounts recommended by Hewlett-Packard
is 50 or less. In environments requiring 50 or more user accounts, Hewlett-Packard recommends
the use of a directory service {E.G. Active Directory or Lightweight Directory Access Protocol} to
manage File Persona file system permissions.
42 File Persona Pre-Installation Checklists
Do not enable Identity Mapping (RFC2307) unless absolutely sure that it is required.
GID (Optional)
UID (Optional) Primary Group Additional Groups
Answer/Value
Group Members
Enable User on
Creation?