IDMAPD.CONF(5) IDMAPD.CONF(5) (NAME) idmapd.conf - NFSv4 (DESCRIPTION) /etc/idmapd.conf rpc.idmapd libnfsidmap NFSv4 . idmapd.conf [General] [Mapping] . : variable = value : [General] Verbosity (: 0) Domain NFSv4. NFSv4 username<->UID groupname<->GID . (: DNS ) No-Strip NFS NFSv4 owner owner_group . . "none" nsswitch / . ( Domain ). "user" "group" "both" "none". (: "none") Reformat-Group Winbind UPN ( staff@americas.example.com) ( AMERICAS.EXAMPLE.COM\staff) netbios ( AMERICAS\staff). true . No- Strip "both" "group" . (: "false") Local-Realms realm (Kerberos) realm . juser@ORDER.EDU juser@MAIL.ORDER.EDU Domain . (: realm ) : realm . [Mapping] Nobody-User . Nobody-Group . [Translation] Method () NFSv4 . . "nsswitch" "umich_ldap" "static" . (: nsswitch) GSS-Methods () GSS . (: Method) [Static] "static" GSS . : principal@REALM = localusername [REGEX] "regex" [REGEX] NFS4 . User-Regex NFSv4 . '|' . . . DOMAIN.ORG MY.DOMAIN.ORG : ^DOMAIN\([^@]+)@MY.DOMAIN.ORG$ Group-Regex NFSv4 . '|' . . . DOMAIN.ORG MY.DOMAIN.ORG : ^([^@]+)@DOMAIN.ORG@MY.DOMAIN.ORG$|^DOMAIN\([^@]+)@MY.DOMAIN.ORG$ Prepend-Before-User NFSv4. '\' . (: none) Append-After-User NFSv4. '@' realm . (: none) Prepend-Before-Group NFSv4. . (: none) Append-After-Group NFSv4. '@' '@' realm . (: none) Group-Name-Prefix NFSv4 . NFSv4 . . (: none) Group-Name-No-Prefix-Regex Group-Name-Prefix. . '|' . (: none) [UMICH_SCHEMA] "umich_ldap" [UMICH_SCHEMA] . LDAP_server LDAP ( UMICH_LDAP ) LDAP_base LDAP. ( UMICH_LDAP ) LDAP_people_base LDAP . (: LDAP_base) LDAP_group_base LDAP . (: LDAP_base) LDAP_canonicalize_name LDAP_server (: "true") LDAP_follow_referrals ldap . (: "true") LDAP_use_ssl SSL LDAP "true" . (: "false") LDAP_ca_cert CA SSL ( LDAP_use_ssl true LDAP_tls_reqcert never ) LDAP_tls_reqcert LDAP . TLS_REQCERT ldap.conf(5) . (: "hard") LDAP_timeout_seconds LDAP (: 4) LDAP_sasl_mech SASL sasl. SASL (: None) LDAP_realm SASL sasl. (: None) LDAP_sasl_authcid sasl. (: None) LDAP_sasl_authzid sasl. (: None) LDAP_sasl_secprops Cyrus SASL. sasl_secprops ldap.conf(5) . LDAP_sasl_canonicalize LDAP . yes LDAP . LDAP . (: None) LDAP_sasl_krb5_ccname (credential cache). KRB5CCNAME . . NFSv4_person_objectclass LDAP (: NFSv4RemotePerson) NFSv4_name_attr NFSv4 (: NFSv4Name) NFSv4_uid_attr uidNumber (: uidNumber) GSS_principal_attr (Principal) GSSAPI (: GSSAuthName) NFSv4_acctname_attr (: uid) NFSv4_group_objectclass LDAP (: NFSv4RemoteGroup) NFSv4_gid_attr gidNumber (: gidNumber) NFSv4_group_attr NFSv4 (: NFSv4Name) LDAP_use_memberof_for_groups LDAP memberuid . SunOne . LDAP_use_memberof_for_groups true memberof gid . (: false) NFSv4_member_attr LDAP_use_memberof_for_groups true . (: memberUid) NFSv4_grouplist_filter . ( ) (EXAMPLES) /etc/idmapd.conf : [General] Verbosity = 0 Domain = domain.org Local-Realms = DOMAIN.ORG,MY.DOMAIN.ORG,YOUR.DOMAIN.ORG [Mapping] Nobody-User = nfsnobody Nobody-Group = nfsnobody [Translation] Method = umich_ldap,regex,nsswitch GSS-Methods = umich_ldap,regex,static [Static] johndoe@OTHER.DOMAIN.ORG = johnny [Regex] User-Regex = ^DOMAIN\([^@]+)@DOMAIN.ORG$ Group-Regex = ^([^@]+)@DOMAIN.ORG@DOMAIN.ORG$|^DOMAIN\([^@]+)@DOMAIN.ORG$ Prepend-Before-User = DOMAIN Append-After-User = @DOMAIN.ORG Append-After-Group = @domain.org@domain.org Group-Name-Prefix = sales- Group-Name-No-Prefix-Regex = -personal-group$ [UMICH_SCHEMA] LDAP_server = ldap.domain.org LDAP_base = dc=org,dc=domain (FILES) /usr/etc/idmapd.conf /usr/etc/idmapd.conf.d/*.conf /etc/idmapd.conf /etc/idmapd.conf.d/*.conf . . (SEE ALSO) idmapd(8), svcgssd(8) (BUGS) nfsidmap IDMAPD.CONF(5)