This page lets you create mappings using the following properties:
Mapping Type - Allows or denies credentials. For more information, see Deny Mappings.
Mapping Direction - The mapping direction. A mapping may map credentials in both directions, only from Windows to Unix, or only from Unix to Windows. For more information, see Mapping Rule Directional Symbols.
Windows Domain - The Active Directory domain of the Windows identity.
Windows Identity - The name of the Windows identity.
Unix Identity- The name of the Unix identity.
Unix Identity Type - The type of the Unix identity, either a user or a group.
Deny mapping rules prevent users from obtaining any mapping, including an ephemeral ID, from the identity mapping service. You can create domain-wide or user-specific deny mappings for Windows users and for Unix users. For example, you can create a mapping to deny access to SMB shares for all Unix users in the group "guest". You cannot create deny mappings that conflict with other mappings.
After creating a name-based mapping, the following symbols indicate the semantics of each rule.
align="center"| - Maps Windows identity to Unix identity, and Unix identity to Windows identity
align="center"| - Maps Windows identity to Unix identity
align="center"| - Maps Unix identity to Windows identity
align="center"| - Prevents Windows identity from obtaining credentials
align="center"| - Prevents Unix identity from obtaining credentials
If an icon is gray instead of black ( , , , , ), that rule matches a Unix identity which cannot be resolved.