管理员组中的用户映射到pcuser
适用场景
ONTAP 9
问题描述
- 管理员组中的用户没有在 Unix 安全模式 qtree 中写入文件的权限。
- 名称映射配置如下,手动将管理员映射到根用户。
Cluster::> vserver name-mapping show -vserver SVM1 -direction win-unix
Vserver: SVM1
Direction: win-unix
Position Hostname IP Address/Mask
-------- ---------------- ----------------
1 - - Pattern: U\\Administrator Replacement: root
2 - - Pattern: U\\(.*) Replacement: \1
2 entries were displayed.
- 但是,管理员组中的用户被映射为pcuser 。
Cluster::*> secd authentication show-creds -node Node01 -vserver SVM1 -win-name user1
UNIX UID: pcuser <> Windows User: U\user1(Windows Domain User)
GID: pcuser
Supplementary GIDs:
pcuser
Primary Group SID: U\Domain Users (Windows Domain group)
Windows Membership:
U\Domain Admins (Windows Domain group)
U\Domain Users (Windows Domain group)
U\Denied RODC Password Replication Group (Windows Alias)
BUILTIN\Administrators (Windows Alias)
BUILTIN\Users (Windows Alias)
User is also a member of Everyone, Authenticated Users, and Network Users
Privileges (0x22b7):
SeBackupPrivilege
SeRestorePrivilege
SeTakeOwnershipPrivilege
SeSecurityPrivilege
SeChangeNotifyPrivilege