1nfsidmap(5)                   File Formats Manual                  nfsidmap(5)
2
3
4

NAME

6       nfsidmap - The NFS idmapper upcall program
7

DESCRIPTION

9       The  file  /usr/sbin/nfsidmap  is used by the NFS idmapper to translate
10       user and group ids into names, and to translate user  and  group  names
11       into ids. Idmapper uses request-key to perform the upcall and cache the
12       result.  /usr/sbin/nfsidmap should only be called by  request-key,  and
13       will  perform  the  translation and initialize a key with the resulting
14       information.
15
16       NFS_USE_NEW_IDMAPPER must be selected when configuring  the  kernel  to
17       use this feature.
18

CONFIGURING

20       The   file   /etc/request-key.conf   will   need   to  be  modified  so
21       /sbin/request-key can properly direct the upcall.  The  following  line
22       should be added before a call to keyctl negate:
23
24       create    nfs_idmap *    *    /usr/sbin/nfsidmap %k %d 600
25
26       This    will   direct   all   nfs_idmap   requests   to   the   program
27       /usr/sbin/nfsidmap The last parameter, 600, defines  how  many  seconds
28       into the future the key will expire.  This is an optional parameter for
29       /usr/sbin/nfsidmap and will default to 600 seconds when not specified.
30
31       The idmapper system uses four key descriptions:
32
33              uid: Find the UID for the given user
34              gid: Find the GID for the given group
35             user: Find the user name for the given UID
36            group: Find the group name for the given GID
37
38       You can choose to handle any of these individually, rather  than  using
39       the  generic upcall program.  If you would like to use your own program
40       for a uid lookup then you would edit your request-key.conf so it  looks
41       similar to this:
42
43       create    nfs_idmap uid:*     *    /some/other/program %k %d 600
44       create    nfs_idmap *         *    /usr/sbin/nfsidmap %k %d 600
45
46       Notice  that the new line was added above the line for the generic pro‐
47       gram.  request-key will find the first matching line and run the corre‐
48       sponding  program.   In  this case, /some/other/program will handle all
49       uid lookups, and /usr/sbin/nfsidmap will handle gid,  user,  and  group
50       lookups.
51

AUTHOR

53       Bryan Schumaker, <bjschuma@netapp.com>
54
55
56
57                                1 October 2010                     nfsidmap(5)
Impressum