Dell PowerStore Configuring Multiprotocol File Sharing

When you modify the NAS server sharing protocols, you can optionally configure default user accounts for a NAS server:

• The default UNIX user account specifies the UNIX account to use for file system access from an unmapped Windows account. If you do not specify a default UNIX account, unmapped Windows users are unable to access the system. The default UNIX user can be a valid existing UNIX account name or follow the format @uid=xxxx, gid=yyyy@, where xxxx and yyyy are the decimal numerical values of the UID and the primary GID, respectively.

  When you configure a default UNIX user, consider the following:

  • If you use a default UNIX account for Windows users, these users are mapped to one UID. Therefore, only one user quota applies to all the users.
  • Setting the default user to a UID of zero or to a user that is resolved to a zero UID grants full root access to that user, which can be dangerous from a security point of view.
• If the file system access policy is Windows, the default Windows account specifies the Windows account to use for file system access from an unmapped UNIX account. For Windows security authorization, the credential is built from the Windows domain controller (DC) and Local Group Database (LGDB) of the SMB server. If you do not specify a default Windows account and if the default Windows user is not found in the Windows DC or the LGDB, an unmapped UNIX user is unable to access a file system that has a Windows access policy. The default Windows user account must be an existing user account in the AD in which the SMB server of the NAS server is joined. It is case insensitive.