IHAC a customer who a mix of Windows and Mac OS 10.5 and 10.6 clients.  All machines are members of AD, and all user names are AD.  They wish to create a single file share on a VNX 5300 and share it out via CIFS to the Windows clients, and NFS to the Mac clients.  My customer has set it up and they can access all files via both sets of clients, however the issue is permissions.  While the CIFS permissions seem to be working as expected (i.e. certain users are unable to gain access), ALL of the Mac clients are able to see all of the files, regardless of how permissions are set up.

My question is what type of authentication methods are available to these Mac clients via NFS, and more importantly, is there a whitepaper that explains to the customer how to set this up?  I assume we will need to set up usermapper, but wanted to confirm  The only paper I have found is the "Configuring a Multiprotcol VNX", but it is all command-line and pretty complicated.  Was hoping there was something that explained how this works in an easier manner

Thanks!