Oracle^® ZFS Storage Appliance Administration Guide, Release OS8.7.x

Creating a Mapping Rule (BUI)

Use the following procedure to grant or deny credentials for specific users through the identity mapping service. An "allow" mapping rule grants Windows identity credentials from a UNIX identity or vice versa. A "deny" mapping rule blocks a Windows identity from receiving the credentials of a UNIX identity or vice versa.

Before You Begin

Configure rule-based mapping as described in Configuring Identity Mapping (BUI).

1. Go to Configuration > Services > Identity Mapping > Rules.
2. Click the add item icon next to Rules.
3. In the Add Mapping Rule dialog box, choose either Allow or Deny for the mapping type.
4. Complete the remaining fields according to the selected mapping type.
   • Allow mapping:

     • Mapping Direction - Choose a direction.

     • Windows Domain - Type the Active Directory domain of the Windows identity, or select All.

     • Windows Identity - Type the name of the Windows identity.

     • Unix Identity - Type the name of the UNIX identity.

     • Unix Identity Type - Select either User or Group.

   • Deny mapping:
     1. For Mapping Direction, choose one of the two options.

        • Block Windows identity mapping - Prevents a Windows identity from gaining the credentials of a UNIX identity

        • Block Windows identity mapping - Prevents a UNIX identity from gaining the credentials of a Windows identity

     2. Enter the Windows or UNIX identity information.
        • If you selected Block Windows identity mapping, type the Windows domain and identity you want to block.
        • If you selected Block UNIX identity mapping, type the UNIX identity and identity type you want to block.
5. Click ADD.

   The new mapping appears in the Rules list.

Related Topics

• Mapping Rule Directional Symbols