Solving NFSv4 AUTH_SYS nobody ownership issue

For files/directories under NFSv4 AUTH_SYS mount, if the ownership is shown as nobody, then check NFSv4 ID Mapping settings. You need to ensure that NFsv4 ID Mapping Domain (e.g. Domain attribute in /etc/idmapd.conf on RHEL7.x) is same across NFS server and NFS client. To illustrate it, examples are provided below for list operation (“ls” command) …

How to configure RHEL host as LDAP client using nslcd

RHEL machine can be configured as LDAP client using nslcd. Summarized below are the steps to configure RHEL7.6 machine as LDAP client. 1. Check whether nslcd service is already installed on your system. $ service nslcd status Redirecting to /bin/systemctl status nslcd.service Unit nslcd.service could not be found. 2. If nslcd service is not installed, …

How to configure RHEL host as Active Directory Client using SSSD

You can configure RHEL machine as a client of Active Directory server using SSSD and AD provider. I’ve summarized the steps which worked on my test setup. Test Setup: >> DNS server – 192.168.122.151>> AD server – 192.168.122.152 (win12servervm1.RAMA.HUMAN.NET)>> AD domain – RAMA.HUMAN.NET>> RHEL client name – robothost Steps to configure RHEL machine as AD …

mmadquery primer (apparatus to query Active Directory from IBM Spectrum Scale)

If you intend to verify configuration on AD server or run basic checks against AD server from IBM Spectrum Scale node, then mmadquery is handy utility. mmadquery is also helpful when IBM Spectrum Scale is configured with AD RFC2307 file authentication and you want to ensure your AD users are populated with the required attributes …

Understanding and Solving NT_STATUS_INVALID_SID issue for SMB access with Spectrum Scale

If you have configured IBM Spectrum Scale with LDAP authentication and then encounter NT_STATUS_INVALID_SID error while accessing IBM Spectrum Scale samba shares, then ensure your cluster netbios sambaSID is part of LDAP user sambaSID. An example to illustrate the failure and proposed solution. 1. Cluster configured with LDAP File Authentication. $ mmuserauth service create –data-access-method …

Understanding and Solving WBC_ERR_DOMAIN_NOT_FOUND error with Spectrum Scale

Problem statement If IBM Spectrum Scale is configured with AD RFC2307 file authentication and you face either of the following issues: 1) NFS protocol access issue with some AD user (e.g. NFS permission denied)2) SMB protocol access issue with AD user (NT_STATUS_LOGON_FAILURE)3) failure in resolving some AD user on IBM Spectrum Scale protocol node then …

Enforce AES encrypted NFS data traffic from IBM Spectrum Scale

Introduction IBM Spectrum Scale can be configured with Kerberos for secure data access over NFS. For details, one can refer technote “Accessing IBM Spectrum Scale over NFS Kerberos using LDAP and MIT KDC” (https://www-03.ibm.com/support/techdocs/atsmastr.nsf/WebIndex/TD106395). This blog explains how to ensure secure data access over NFS with strong encryption type AES-128 or AES-256 i.e. NFS server …