Unsolved

This post is more than 5 years old

17 Posts

696

July 9th, 2009 13:00

Moving internal usermapper from server_2 to server_3

We have an existing 4 Datamover NAS (NAS1). NAS1 server_2 is currently running the primary usermapper service. A second NAS (NAS2) is running a secondary usermapper that points to NAS1 server_2. We have a need to move the primary usermapper service from NAS1 server_2 as we want point NAS1 server_2 directly to Active Directory for testing purposes. Our plan is to stop the primary usermapper service on NAS1 server_2, designated NAS1 server_3 as the primary usermapper service, and then repoint NAS2 server_2 to NAS1 server_3. Are there any restrictions anyone is aware of that would prevent this? I haven't found any in the NAS documentation other than comments that server_2 is the default primary/secondary usermapper service unless otherwise configured. Thanks in advance.

674 Posts

July 9th, 2009 23:00

This depends on your environment

Just stopping primary usrmapper on server_2 and starting server_3 as a primary usrmapper does not involve everything.

f.e. the original primary usrmapper has its usrmapper database, will you migrate this to server_3???

server_2 will still have its secmap, where all the already done mappings are stored. So even if you stop usrmapper from this server, the old secmap mapping is still there ....

Secmap is always the first resource which will be used for resolving Group/User SIDs

17 Posts

July 14th, 2009 11:00

We are planning to export/import the information. Are you saying that even with server_2 usermapper disabled that server_2 secmap databased would still be referenced for uid/gid/sid translations? Will a -remove -all against server_2 prevent this?

server_usermapper server_2 -Export -user /tmp/user.server2.save
server_usermapper server_2 -Export -group /tmp/grp.server2.save
server_usermapper server_2 disable

server_usermapper server_3 -remove -all
server_usermapper server_3 -Import -user /tmp/user.server2.save
server_usermapper server_3 -Import -group /tmp/grp.server2.save
server_usermapper server_3 enable

674 Posts

July 14th, 2009 23:00

Are you saying that even with server_2 usermapper
disabled that server_2 secmap databased would still
be referenced for uid/gid/sid translations? Will a
-remove -all against server_2 prevent this?


No.
Think of secmap as a cache of all already referenced or used uid/gids of this datamover.

If you disable remove usrmapper from server_2, all datamovers will still have their secmap.
Usrmapper will only be involved if secmap/local passwd/NIS/LDAP/AD (in this order) is unable to resolve a ID.

Message was edited by:
Peter

Top