Importing User Mappings From a Rule-Mapping File

You use the idmap import command to import a set of rule-based user mappings that are stored in a file.

The idmap supports the following file formats:

• The NetApp usermap.cfg rule-mapping format:

  Windows-username [direction] UNIX-username

  Windows-username is a Windows user name in either the domain-name\username or username@domain-name format.

  UNIX-username is an Oracle Solaris user name.

  direction is one of the following:

  • == indicates a bidirectional mapping, which is the default

  • => or <= indicates a unidirectional mapping

  The IP qualifier is not supported.

• The Samba smbusers rule-mapping format:

  UNIX-name = winname1 winname2 ...

  The mappings are imported as unidirectional mappings from one or more Windows names to an Oracle Solaris name.

  This format is based on the username map information on the smb.conf man page, which is available on the Samba web site. The use of an asterisk (*) for winname is supported. However, the @group directive and the chaining of mappings are not supported.

  By default, if no mapping entries are in the smbusers file, Samba maps a winname to the equivalent UNIX-name, if any. The following idmap command shows this mapping:

  $ idmap add -d winuser:"*@*" unixuser:"*"