ONTAP Discussions

ONTAP S3 Access 9.15.1P15 with AD Group

KPKarthik1
28 Views

I have created object-store-server on a Scaleout cluster ( Ontap 9.15.1P15). i created Buckets and can able to access with local user. Required help on AD group   integration for the Bucket. Do we require LDAP integration for the Object_store_SVM?

Not able to access TR 4814 in NetApp site and is unavailable 

 

when i try to add the ad group iam getting the bellow error

 

TestCluster::*> object-store-server bucket policy statement create -vserver testsvm -bucket adbucket -effect allow -action GetObject,PutObject,DeleteObject,ListBucket,GetBucketAcl,GetObjectAcl,ListBucketMultipartUploads,ListMultipartUploadParts,GetObjectTagging,PutObjectTagging,DeleteObjectTagging,GetBucketLocation,GetBucketVersioning,PutBucketVersioning,ListBucketVersions,GetBucketPolicy,PutBucketPolicy,DeleteBucketPolicy,PutLifecycleConfiguration,GetLifecycleConfiguration  -principal ITA/GROUP_TSA_DP
  (vserver object-store-server bucket policy statement create)

 

Error: Specified user name or group name "ITA/GROUP_TSA_DP" is not valid. Valid characters for a user
       name or group name are 0-9, A-Z, a-z, "_", "+", "=", ",", ".", "@", and "-". Valid syntax for an S3 group is
       "group/<group-name>". Valid syntax for a NAS group is "nasgroup/<group-name>".
       "ITA/GROUP_TSA_DP" is an invalid value for field "-principal <Object Store Principal>", ...

 

Thanks 

KP Karthik 

 

0 REPLIES 0
Public