Forum Stats

  • 3,872,167 Users
  • 2,266,400 Discussions
  • 7,911,086 Comments

Discussions

zfs LDAP configuration

3438936
3438936 Member Posts: 1
edited Aug 31, 2020 1:25AM in ZFS Storage Appliance

Hi,

We have ZFS arrays and we want to configure LDAP. We are worrying that when we configured LDAP, if we lost our current local users.

Can we use both local and ldap user?

thanks,

Halil

Answers

  • Sreek-Oracle
    Sreek-Oracle Member Posts: 74 Employee
    edited Aug 31, 2020 1:25AM

    Bit confused with you query -  Why do you think you are going to loose  all  information saved loccally (local users) on ZFSSA , while configuring ZFSSA as LDAP  client.

    LDAP (Lightweight Directory Access Protocol) is a directory service for centralizing management of users, groups, hostnames and other resources (called objects). This service on the appliance acts as an LDAP client so that:

    • LDAP users can login to FTP and HTTP/WebDAV.
    • LDAP user names (instead of numerical ids) can be used to configure root directory ACLs on a share.
    • LDAP users can be granted privileges for appliance administration. The appliance supplements LDAP information with its own privilege settings.

    Note that UIDs from 0-99 inclusive are reserved by the operating system vendor for use in future applications. Their use by end system users or vendors of layered products is not supported and may cause security related issues with future applications.

    Disclaimer :  UIDs from 0-99 inclusive are reserved by the operating system vendor for use in future applications. Their use by end system users or vendors of layered products is not supported and can cause security issues with other applications.

    pastedImage_0.png

    In any case you may want to take a configuration backup prior to doing your Ldap(client) setup . Aslo you are requested to proactively open a service request with ZFSSA, so that you don't waste your time when you run into issue.

    pastedImage_2.png

    All  these information is easily available on your Applinace ONLINE HELP page

    pastedImage_3.png

    Kind Regards

    Sreek