Dell PowerStore Configuring Multiprotocol File Sharing

It may be necessary to change the OpenLDAP schema for Linux when exporting some NFS file systems to netgroups.

When downloading OpenLDAP from the OpenLDAP organization, the LDAP server comes with a schema that complies strictly with RFC 2307:

( nisSchema.1.14 NAME 'nisNetgroupTriple'
DESC 'Netgroup triple'
SYNTAX 'nisNetgroupTripleSyntax' )

The LDAP server schema can also comply with RFC 2307bis:

( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
DESC 'Netgroup triple'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

With PowerStore, both RFC 2307 and RFC 2307bis are supported.

RFC 2307 defines the syntax of the netgroup triple as case-sensitive even though the common usage is that host names in netgroup triples should not be case-sensitive. If you want to match host names with different cases (for example, the host names are uppercase in DNS and lowercase in netgroup triples as defined in the LDAP directory), the LDAP schema must be changed.

Because RFC 2037bis is a draft and the OpenLDAP organization does not recognize it, the OpenLDAP schema for Linux has to be changed to be compatible with PowerStore. Therefore, it is necessary to change the OpenLDAP schema for PowerStore as follows:

In the /etc/openldap/schema/nis.schema file on your OpenLDAP server, find the following entry:

attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
DESC 'Netgroup triple'
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )

Edit the entry to appear as follows (adding the EQUALITY directive):

attributetype ( 1.3.6.1.1.1.1.14 NAME 'nisNetgroupTriple'
DESC 'Netgroup triple'
EQUALITY caseIgnoreIA5Match
SYNTAX 1.3.6.1.4.1.1466.115.121.1.26 )