Consistent ID mapping

[miguel.sanders at arcelormittal.com]

Hi Volker

Well the TDB files are not on the GPFS filesystem. Besides ID mapping, is this mandatory to put this on the GPFS filesystem?
I have been looking at the idmap_rid but afaik that's only valid in a single AD domain configuration. (I have multiple...)


Met vriendelijke groet
Best regards
Bien à vous

Miguel SANDERS
ArcelorMittal Gent

UNIX Systems & Storage
IT Supply Western Europe | John Kennedylaan 51
B-9042 Gent

T +32 9 347 3538 | F +32 9 347 4901 | M +32478 805 023
E miguel.sanders at arcelormittal.com
www.arcelormittal.com/gent

-----Oorspronkelijk bericht-----
Van: Volker Lendecke [mailto:Volker.Lendecke at SerNet.DE] 
Verzonden: maandag 11 mei 2009 22:14
Aan: SANDERS Miguel
CC: samba-technical at lists.samba.org
Onderwerp: Re: Consistent ID mapping

On Mon, May 11, 2009 at 09:30:11PM +0200, miguel.sanders at arcelormittal.com wrote:
> I have a question on how to keep ID mapping consistent.(my Samba 
> backend is a GPFS filesystem).

You're certainly using samba+ctdb? Everything else will lead to data corruption sooner or later.

> My main concern now is that the SID to UID/GID mapping should be 
> consistent over the cluster nodes in order to keep ACLs consistent.  
> Any pointers on how can I achieve that?

Different possibilities. With idmap_tdb2 and ctdb you will put the idmap.tdb into a persistent tdb file which is consistent across the cluster. Alternatively you can use idmap_rid or idmap_ad (assuming you have SFU) which automatically keep the ID mappings consistent.

Volker

**** 
This message and any attachment are confidential, intended solely for the use of the individual or entity to whom it is addressed and may be protected by professional secrecy or intellectual property rights. 
If you have received it by mistake, or are not the named recipient(s), please immediately notify the sender and delete the message. You are hereby notified that any unauthorized use, copying or dissemination of any or all information contained in this message is prohibited. 
Arcelormittal shall not be liable for the message if altered, falsified, or in case of error in the recipient. 
This message does not constitute any right or commitment for ArcelorMittal except when expressly agreed otherwise in writing in a separate agreement.  
****