UID/GID Mapping - Revision history

Adilger: /* Introduction */ add newer features of Nodemaps

2023-04-06T18:15:21Z

Introduction: add newer features of Nodemaps

← Older revision		Revision as of 11:15, 6 April 2023
Line 1:		Line 1:
	=== Introduction ===		=== Introduction ===

	Using Nodemap, UIDs, GIDs and PROJIDs provided by remote clients can be		Using Nodemap, UIDs, GIDs and PROJIDs provided by remote clients can be mapped onto a local set of UIDs, GIDs and PROJIDs for storage in the filesystem. Non-overlapping ranges of UID, GID, PROJID would be used from the filesystem to cater to different subsets of users.
	mapped onto a local set of UIDs, GIDs and PROJIDs.

	You may find ~~this~~ useful if:		The Nodemap functionality also allows restricting client sub-groups to mount only a specific subdirectory tree of the filesystem, rather than the whole filesystem (Subdirectory Mount).

			You may find Nodemaps useful if:

	* You need to prevent UID, GID, and PROJID collisions between clients in different administrative domains		* You need to prevent UID, GID, and PROJID collisions between clients in different administrative domains
Line 10:		Line 11:
	* You can limit access from a partner site		* You can limit access from a partner site
	* You can limit administrator/root access to the filesystem		* You can limit administrator/root access to the filesystem
			* Force clients to mount the filesystem read-only
			* Specifying a subdirectory for clients (e.g. multi-tenancy)
			* Selectively enable audit logging for clients
			* Selectively enable client-side data encryption

	== Resources ==		== Resources ==

Adilger: /* Presentations */ add another nodemap presentation

2023-04-06T18:09:44Z

Presentations: add another nodemap presentation

← Older revision		Revision as of 11:09, 6 April 2023
Line 19:		Line 19:

	== Presentations ==		== Presentations ==
			* [https://wiki.lustre.org/images/5/5c/LUG2018-Multitenancy-Buisson.pdf Multi-tenancy: real-life implementation (LUG 2018)]
	* [http://lustre.ornl.gov/ecosystem-2016/documents/tutorials/Simms-IU-NodemapSharedKey.pdf Securing Lustre with Nodemap and Shared Key (Lustre Ecosystem 2016)]		* [http://lustre.ornl.gov/ecosystem-2016/documents/tutorials/Simms-IU-NodemapSharedKey.pdf Securing Lustre with Nodemap and Shared Key (Lustre Ecosystem 2016)]
	* [http://cdn.opensfs.org/wp-content/uploads/2015/04/GSS-Shard-key-Update-and-Using-UID_Simms.pdf Using UID Mapping in Lustre 2.7 and GSS Shared Key Update (LUG 2015)]		* [http://cdn.opensfs.org/wp-content/uploads/2015/04/GSS-Shard-key-Update-and-Using-UID_Simms.pdf Using UID Mapping in Lustre 2.7 and GSS Shared Key Update (LUG 2015)]

	[[Category:Features]]		[[Category:Features]]

Adilger at 00:29, 6 March 2023

2023-03-06T00:29:06Z

← Older revision		Revision as of 17:29, 5 March 2023
Line 7:		Line 7:

	* You need to prevent UID, GID, and PROJID collisions between clients in different administrative domains		* You need to prevent UID, GID, and PROJID collisions between clients in different administrative domains
	* Two or more partner organizations would like to share data		* Two or more partner organizations would like to share data in the same filesystem
	* You can limit access from a partner site		* You can limit access from a partner site
			* You can limit administrator/root access to the filesystem

	== Resources ==		== Resources ==

Adilger: /* Introduction */ reference projids

2023-03-06T00:26:47Z

Introduction: reference projids

← Older revision		Revision as of 17:26, 5 March 2023
Line 1:		Line 1:
	=== Introduction ===		=== Introduction ===

	Using Nodemap, UIDs and ~~GIDs~~ provided by remote clients can be		Using Nodemap, UIDs, GIDs and PROJIDs provided by remote clients can be
	mapped onto a local set of UIDs and ~~GIDs~~.		mapped onto a local set of UIDs, GIDs and PROJIDs.

	You may find this useful if:		You may find this useful if:

	* You need to prevent UID and ~~GID~~ collisions between clients in different administrative domains		* You need to prevent UID, GID, and PROJID collisions between clients in different administrative domains
	* Two or more partner organizations would like to share data		* Two or more partner organizations would like to share data
	* You can limit access from a partner site		* You can limit access from a partner site

Spitzcor at 19:37, 1 March 2019

2019-03-01T19:37:47Z

← Older revision		Revision as of 12:37, 1 March 2019
Line 11:		Line 11:

	== Resources ==		== Resources ==
	* [https://jira.~~hpdd.intel~~.com/browse/LU-3291 IU UID/GID Mapping Feature (LU-3291)]		* [https://jira.whamcloud.com/browse/LU-3291 IU UID/GID Mapping Feature (LU-3291)]
	* [http://wiki.opensfs.org/Contract_SFS-DEV-002 OpenSFS Contract SFS-DEV-002]		* [http://wiki.opensfs.org/Contract_SFS-DEV-002 OpenSFS Contract SFS-DEV-002]
	** [http://wiki.opensfs.org/File:UID_GID_Scope_Statement_v2.pdf UID-GID Scope Statement v2]		** [http://wiki.opensfs.org/File:UID_GID_Scope_Statement_v2.pdf UID-GID Scope Statement v2]

KenRawlings: adding opensfs contract resources section

2016-06-29T19:38:01Z

adding opensfs contract resources section

← Older revision		Revision as of 12:38, 29 June 2016
Line 12:		Line 12:
	== Resources ==		== Resources ==
	* [https://jira.hpdd.intel.com/browse/LU-3291 IU UID/GID Mapping Feature (LU-3291)]		* [https://jira.hpdd.intel.com/browse/LU-3291 IU UID/GID Mapping Feature (LU-3291)]
			* [http://wiki.opensfs.org/Contract_SFS-DEV-002 OpenSFS Contract SFS-DEV-002]
			** [http://wiki.opensfs.org/File:UID_GID_Scope_Statement_v2.pdf UID-GID Scope Statement v2]
			** [http://wiki.opensfs.org/File:UID-GID_Solution_Architecture.pdf UID-GID Solution Architecture]
			** [http://wiki.opensfs.org/File:UID-GID_HLDv3.pdf UID-GID High Level Design]

	== Presentations ==		== Presentations ==

KenRawlings: initial creation

2016-06-29T15:30:52Z

initial creation

New page

=== Introduction ===

Using Nodemap, UIDs and GIDs provided by remote clients can be
mapped onto a local set of UIDs and GIDs.

You may find this useful if:

* You need to prevent UID and GID collisions between clients in different administrative domains
* Two or more partner organizations would like to share data
* You can limit access from a partner site

== Resources ==
* [https://jira.hpdd.intel.com/browse/LU-3291 IU UID/GID Mapping Feature (LU-3291)]

== Presentations ==
* [http://lustre.ornl.gov/ecosystem-2016/documents/tutorials/Simms-IU-NodemapSharedKey.pdf Securing Lustre with Nodemap and Shared Key (Lustre Ecosystem 2016)]
* [http://cdn.opensfs.org/wp-content/uploads/2015/04/GSS-Shard-key-Update-and-Using-UID_Simms.pdf Using UID Mapping in Lustre 2.7 and GSS Shared Key Update (LUG 2015)]

[[Category:Features]]