PowerScaleOneFS CLI Command Reference

Syntax

isi auth settings global modify
  [--send-ntlmv2 {yes | no}]
  [--revert-send-ntlmv2]
  [--space-replacement <character>]
  [--revert-space-replacement]
  [--workgroup <string>] 
  [--revert-workgroup]
  [--provider-hostname-lookup {dns-first | nis-first | disabled}]
  [--user-object-cache-size <size>]
  [--revert-user-object-cache-size]
  [--on-disk-identity {native | unix | sid}] 
  [--revert-on-disk-identity]
  [--rpc-block-time <duration>]
  [--revert-rpc-block-time]
  [--rpc-max-requests <integer>]
  [--revert-rpc-max-requests]
  [--default-ldap-tls-revocation-check-level {none | allowNoData | allowNoSrc | strict}]
  [--unknown-gid <integer>]
  [--revert-unknown-gid]
  [--unknown-uid <integer>]
  [--revert-unknown-uid]
  [--failed-login-delay-time <duration>]
  [--revert-failed-login-delay-time]
  [--concurrent-session-limit <integer>]
  [--revert-concurrent-session-limit]
  [--verbose]

Options

--send-ntlmv2 {yes | no}

Specifies whether to send only NTLMv2 responses to an SMB client. The default value is no. Valid values are yes, no. The default value is no.

--revert-send-ntlmv2

Reverts the --send-ntlmv2 setting to the system default value.

--space-replacement <character>

For clients that have difficulty parsing spaces in user and group names, specifies a substitute character. Be careful to choose a character that is not in use.

--revert-space-replacement

Reverts the --space-replacement setting to the system default value.

--workgroup <string>

Specifies the NetBIOS workgroup. The default value is WORKGROUP.

--revert-workgroup

Reverts the --workgroup setting to the system default value.

--provider-hostname-lookup {dns-first | nis-first | disabled}

Allows hostname lookup through authentication providers. Applies to NIS only. The default value is disabled.

--user-object-cache-size <size>

Specifies the maximum size (in bytes) of the security object cache in the authentication service.

--revert-user-object-cache-size

Reverts the --user-object-cache-size setting to the system default value.

--on-disk-identity <string>

Controls the preferred identity to store on disk. If OneFS is unable to convert an identity to the preferred format, it is stored as is. This setting does not affect identities that are already stored on disk.

The accepted values are listed below.

native

Allows OneFS to determine the identity to store on disk. This is the recommended setting.

unix

Always stores incoming UNIX identifiers (UIDs and GIDs) on disk.

sid

Stores incoming Windows security identifiers (SIDs) on disk unless the SID was generated from a UNIX identifier. If the SID was generated from a UNIX identifier, OneFS converts it back to the UNIX identifier and stores it on disk.

NOTE:To prevent permission errors after changing the on-disk identity, run the Repair Permissions job with the convert mode specified.

--revert-on-disk-identity

Sets the --on-disk-identity setting to the system default value.

--rpc-block-time <integer>

Specifies the length of time, in milliseconds, before an ID mapper request becomes asynchronous.

--revert-rpc-block-time

Sets the --rpc-block-time setting to the system default value.

--rpc-max-requests <integer>

Specifies the maximum number of simultaneous ID mapper requests allowed. The default value is 64.

--revert-rpc-max-requests

Sets the --rpc-max-requests setting to the system default value.

--default-ldap-tls-revocation-check-level

Defines the default TLS revocation checking algoritihm behavior when connecting to an LDAP authentication provider, if it is not already defined by the provider.

--unknown-gid <integer>

Specifies the GID to use for the unknown (anonymous) group.

--revert-unknown-gid

Sets the --unknown-gid setting to the system default value.

--unknown-uid <integer>

Specifies the UID to use for the unknown (anonymous) user.

--revert-unknown-uid

Sets the --unknown-uid setting to the system default value.

--failed-login-delay-time<duration>

Specifies the delay in seconds following a failed authentication attempt.

--revert-failed-login-delay-time

Resets to the default system value.

--concurrent-session-limit<integer>

Specifies the total number of concurrent administrative sessions.

--revert-concurrent-session-limit

Resets to the default system value.

--verbose | -v

Displays more detailed information.