topic Re: windows to unix user mapping in General Discussion

windows to unix user mapping

digdev — Wed, 04 Jun 2025 10:08:39 GMT

Hello

I set up a UNIX security style volume on a multiprotocol enabled vserver.

The goal is that UNIX and Windows clients can put, edit and delete data on the volume. From a Linux client I can mount the NFS share and put data on the share. From a Windows client I can only do that from within a user context that is member of the local administrators group of the vserver. Do I need to map the Windows user to a UNIX user on the vserver for this to work? How can I link permissions to the local vserver unix server? The information I have found in the documentation center only provides an example for a mapping where Windows and UNIX accounts have the same name, however this is not the case in my situation here. Any help/tips would be greatly appreciated.

Best regards

Re: windows to unix user mapping

hmoubara — Tue, 23 Nov 2021 03:46:14 GMT

Hello,

You should be able to map it to any user you want as long as that user is available either in AD/ldap/NIS or locally. Please check the below documentation for some additional information:

https://docs.netapp.com/us-en/ontap/nfs-admin/name-mapping-concept.html

https://docs.netapp.com/us-en/ontap/nfs-admin/create-name-mapping-task.html

Thanks

Re: windows to unix user mapping

digdev — Tue, 23 Nov 2021 07:33:51 GMT

Thank you, so if I understand correctly I should make a local unix user on the vserver and create a Windows to user mapping to this user? How can I set permissions on the data for this local user?

Best regards

Re: windows to unix user mapping

hmoubara — Tue, 23 Nov 2021 08:01:31 GMT

Hello,

The unix user you want to map it to can be local or from ldap/nis server based on where that user exist or you have to create. As for the permissions, you are mapping the windows user to a unix user that has already premission to that folder/file based on its bits (per example: 775 owner, group or others).

Hope this answer your question.

Thanks

Re: windows to unix user mapping

digdev — Tue, 23 Nov 2021 08:37:06 GMT

Hello,

thank you for the helpful reply. I still have one question, with local user you mean a local user on the vserver I guess? Can I set the permission bits in ONTAP or do I have to do that from a UNIX client?

Re: windows to unix user mapping

hmoubara — Tue, 23 Nov 2021 08:53:55 GMT

Hello,

It could be a local user on the vserver or a user from ldap/nis/ad. As far as the permissions, we recommend setting those from the unix client.

Thanks