|
Authorizing Appropriate Access To The ADS LDS Namespace ObjectTo connect to the Configuration partition:1. Click Start, right-click Command Prompt, and click Run as administrator to open an elevated command prompt.2. Navigate to the C:\WINDOWS\ADAM directory, and run the dsacls command to grant the Everyone group readaccess to the mapping data store as follows:dsacls "\\server1:389\CN=nfsadldsinstance,dc=server1" /G everyone:GR /I:T3. Optionally, if you are setting up a shared AD LDS store to allow multiple NFS servers to query the account mappingdatabase, add the mapping data store to the ACL to allow Read permissions for the Anonymous Logon account asfollows:dsacls "\\server1:389\CN=nfsadldsinstance,dc=server1" /G "anonymouslogon":GR /I:TNOTE: You can skip this step if there is no shared access between computers to the mapping data store.Configuring The Mapping SourceTo configure the mapping source:1. Click Start, right-click Command Prompt, and click Run as administrator to open an elevated command prompt.2. Run the following command, whereis the name of the computer where the AD LDS instance wascreated, and whereis the port that the AD LDS instance uses:nfsadmin mapping config adlookup=yes addomain=:NOTE: For this example, use the following:nfsadmin mapping config adlookup=yes addomain=server1:3893. Test the setup by accessing the NFS resources and verifying that the user and group account mappings work asexpected.Debug Notes For NFS Account Mapping ProblemsServer for NFS can be made to log account mapping failures to the Windows Event Log service by setting the followingregistry key:HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\nfsserver\Parameters\VerboseMappingFailureLogging INVALID USE OF SYMBOLS REG_DWORD = 1After you create the key, you must restart the Server for NFS.Restarting The Server For NFSTo restart the server for NFS:1. Click Start, right-click Command Prompt, and click Run as administrator to open an elevated command prompt.2. Run the following command:nfsadmin server stop && nfsadmin server start22 PreviousNext |