Skip to main content
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.

PowerScaleOneFS CLI Command Reference

isi auth settings global modify

Modifies the global authentication settings.

Syntax

isi auth settings global modify
  [--send-ntlmv2 {yes | no}]
  [--revert-send-ntlmv2]
  [--space-replacement <character>]
  [--revert-space-replacement]
  [--workgroup <string>] 
  [--revert-workgroup]
  [--provider-hostname-lookup {dns-first | nis-first | disabled}]
  [--user-object-cache-size <size>]
  [--revert-user-object-cache-size]
  [--on-disk-identity {native | unix | sid}] 
  [--revert-on-disk-identity]
  [--rpc-block-time <duration>]
  [--revert-rpc-block-time]
  [--rpc-max-requests <integer>]
  [--revert-rpc-max-requests]
  [--default-ldap-tls-revocation-check-level {none | allowNoData | allowNoSrc | strict}]
  [--unknown-gid <integer>]
  [--revert-unknown-gid]
  [--unknown-uid <integer>]
  [--revert-unknown-uid]
  [--failed-login-delay-time <duration>]
  [--revert-failed-login-delay-time]
  [--concurrent-session-limit <integer>]
  [--revert-concurrent-session-limit]
  [--verbose]

Options

--send-ntlmv2 {yes | no}
Specifies whether to send only NTLMv2 responses to an SMB client. The default value is no. Valid values are yes, no. The default value is no.
--revert-send-ntlmv2
Reverts the --send-ntlmv2 setting to the system default value.
--space-replacement <character>
For clients that have difficulty parsing spaces in user and group names, specifies a substitute character. Be careful to choose a character that is not in use.
--revert-space-replacement
Reverts the --space-replacement setting to the system default value.
--workgroup <string>
Specifies the NetBIOS workgroup. The default value is WORKGROUP.
--revert-workgroup
Reverts the --workgroup setting to the system default value.
--provider-hostname-lookup {dns-first | nis-first | disabled}
Allows hostname lookup through authentication providers. Applies to NIS only. The default value is disabled.
--user-object-cache-size <size>
Specifies the maximum size (in bytes) of the security object cache in the authentication service.
--revert-user-object-cache-size
Reverts the --user-object-cache-size setting to the system default value.
--on-disk-identity <string>
Controls the preferred identity to store on disk. If OneFS is unable to convert an identity to the preferred format, it is stored as is. This setting does not affect identities that are already stored on disk.

The accepted values are listed below.

native
Allows OneFS to determine the identity to store on disk. This is the recommended setting.
unix
Always stores incoming UNIX identifiers (UIDs and GIDs) on disk.
sid
Stores incoming Windows security identifiers (SIDs) on disk unless the SID was generated from a UNIX identifier. If the SID was generated from a UNIX identifier, OneFS converts it back to the UNIX identifier and stores it on disk.
NOTE:To prevent permission errors after changing the on-disk identity, run the Repair Permissions job with the convert mode specified.
--revert-on-disk-identity
Sets the --on-disk-identity setting to the system default value.
--rpc-block-time <integer>
Specifies the length of time, in milliseconds, before an ID mapper request becomes asynchronous.
--revert-rpc-block-time
Sets the --rpc-block-time setting to the system default value.
--rpc-max-requests <integer>
Specifies the maximum number of simultaneous ID mapper requests allowed. The default value is 64.
--revert-rpc-max-requests
Sets the --rpc-max-requests setting to the system default value.
--default-ldap-tls-revocation-check-level
Defines the default TLS revocation checking algoritihm behavior when connecting to an LDAP authentication provider, if it is not already defined by the provider.
--unknown-gid <integer>
Specifies the GID to use for the unknown (anonymous) group.
--revert-unknown-gid
Sets the --unknown-gid setting to the system default value.
--unknown-uid <integer>
Specifies the UID to use for the unknown (anonymous) user.
--revert-unknown-uid
Sets the --unknown-uid setting to the system default value.
--failed-login-delay-time<duration>
Specifies the delay in seconds following a failed authentication attempt.
--revert-failed-login-delay-time
Resets to the default system value.
--concurrent-session-limit<integer>
Specifies the total number of concurrent administrative sessions.
--revert-concurrent-session-limit
Resets to the default system value.
--verbose | -v
Displays more detailed information.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\