Re: [gpfsug-discuss] Question concerning integration of CES with AD authentication system

2018-05-24 Thread Christof Schmitt
> My understanding, after talking to expert people here, is that I should use the RFC2307 model for ID mapping (described here: https://goo.gl/XvqHDH). The problem is > that our ID schema is slightly different than that one described in RFC2307. In the RFC the relevant user identification fields

Re: [gpfsug-discuss] Question concerning integration of CES with AD authentication system

2018-05-24 Thread Christof Schmitt
> Basically Samba ignores the separate GID field in RFC2307bis, so one> imagines the options for changing the LDAP attributes are none> existent.   mmuserauth now has an option to use either the gid from the actual primarygroup or the gid defined for the user. See:  

Re: [gpfsug-discuss] Question concerning integration of CES with AD authentication system

2018-05-24 Thread Simon Thompson (IT Research Support)
You can change them using the normal SMB commands, from the appropriate bin directory, whether this is supported is another matter. We have one parameter set this way but I forgot which. Simkn From: gpfsug-discuss-boun...@spectrumscale.org

Re: [gpfsug-discuss] Question concerning integration of CES with AD authentication system

2018-05-24 Thread Skylar Thompson
On Thu, May 24, 2018 at 03:46:32PM +0100, Jonathan Buzzard wrote: > On Thu, 2018-05-24 at 14:16 +, Skylar Thompson wrote: > > I haven't needed to change the LDAP attributes that CES uses, but I > > do see --user-id-attrib in the mmuserauth documentation. > > Unfortunately, I don't see an

Re: [gpfsug-discuss] Question concerning integration of CES with AD authentication system

2018-05-24 Thread Jonathan Buzzard
On Thu, 2018-05-24 at 14:16 +, Skylar Thompson wrote: > I haven't needed to change the LDAP attributes that CES uses, but I > do see --user-id-attrib in the mmuserauth documentation. > Unfortunately, I don't see an equivalent one for gidNumber. > Is it not doing the "Samba thing" where your

Re: [gpfsug-discuss] Question concerning integration of CES with AD authentication system

2018-05-24 Thread Skylar Thompson
I haven't needed to change the LDAP attributes that CES uses, but I do see --user-id-attrib in the mmuserauth documentation. Unfortunately, I don't see an equivalent one for gidNumber. On Thu, May 24, 2018 at 08:45:00AM +, Dorigo Alvise (PSI) wrote: > Dear members, > at PSI I'm trying to

[gpfsug-discuss] Inter-clusters issue with change of the subnet IP

2018-05-24 Thread Ivano Talamo
Hi all, We currently have an issue with our GPFS clusters. Shortly when we removed/added a node to a cluster we changed IP address for the IPoIB subnet and this broke GPFS. The primary IP didn't change. In details our setup is quite standard: one GPFS cluster with CPU nodes only accessing (via

[gpfsug-discuss] Question concerning integration of CES with AD authentication system

2018-05-24 Thread Dorigo Alvise (PSI)
Dear members, at PSI I'm trying to integrate the CES service with our AD authentication system. My understanding, after talking to expert people here, is that I should use the RFC2307 model for ID mapping (described here: https://goo.gl/XvqHDH). The problem is that our ID schema is slightly