IBM Storwize V7000, Quick Installation Manual

Page: 41 / 102

Internally the Storwize V7000 Unified system uses IBM General Parallel File
System (GPFS). GPFS is a UNIX file system that uses UNIX-style user IDs (UID)
and group IDs (GID) to manage file permissions.
For Windows (CIFS) users to access files, there must be some sort of User ID
Mapping, such as some way to map the Windows user and group objects to Unix
UIDs and GIDs. The Storwize V7000 Unified system supports user ID mapping
either internally or externally. While external user ID mapping is preferred, internal
mapping can be done using a table local to the Storwize V7000 Unified system to
map Windows user and group objects to arbitrary Unix UIDs and GIDs. That table
is not accessible externally, even to another Storwize V7000 Unified system for
asynchronous file system replication.
Asynchronous replication thus requires external user ID mapping, specifically
Windows Active Directory with the Subsystem for Unix (SUA) enabled and
populated. Mixed client access, which is having both UNIX and Windows clients
access the same files (using NFS and CIFS), requires external user mapping using
either Active Directory with SUA/SFU or LDAP with Samba extensions.
Authentication
Infrastructure?
Local
Passwords
Choose
Ensure that you
have method for
manually syncing
password tables
and highlight
risk of UID conflicts
LDAP
or
NIS
Obtain the
information in
Table <N>
Implement
external
auth
UNIX/Windows/Mixed
Active Directory with
Unix ID mapping
mapping.
NO
Implement ID mapping
Populate all users and
groups with UNIX IDs
Use Unified Internal ID Mapping
There is a risk of ID conflict
Await Development to produce
export method or automation for
user ID assignments
Stay with local
No
Yes
Windows
Implement ID Mapping
Don't
Implement ID
Mapping
Windows
Active Directory
Version?
SFU, use
schema
type sfu
Active Directory with
UNIX ID mapping
mapping enabled.
Authentication
Infrastructure?
Pre-2003sp2
Yes
MIXED
Windows 2008
Active Directory
with UNIX ID
Mapping
ID mapping included,
just needs to be
enabled, use schema
type rfc2307
2003sp2 or 2008
UNIX
ifs00059
Choose
Figure 12. Planning chart for determining an authentication method
Chapter 1. Before you begin the installation
21