PowerScale OneFS Authentication, Identity Management, and Authorization

• 1

  Overview
• 2

  Note to readers
• 3

  Revisions
• 4

  We value your feedback

• 1

  Introduction
• 2

  UNIX Identifier
• 3

  Microsoft Security Identifier (SID)

• 1

  Multiprotocol NAS

• 1

  OneFS Unified Permission Model

• 1

  Introduction
• 2

  Authentication
• 3

  Identity management
• 4

  Authorization
• 5

  AIMA access hierarchy

• 1

  Access zones and root-based paths

• 1

  PowerScale OneFS tokens and file permissions infographic

• 1

  Introduction
• 2

  ID mapping database
• 3

  ID ranges cannot overlap
• 4

  OneFS user-mapping options
• 5

  Checking access tokens
• 6

  Importance of user mappings
• 7

  On-Disk Identity

• 1

  Introduction
• 2

  NFS client file access
• 3

  SMB client file access sequence
• 4

  How file state is determined
• 5

  POSIX file state
• 6

  ACL file state
• 7

  Viewing file permissions
• 8

  POSIX file permissions management
• 9

  ACL file permissions management
• 10

  File permission state changes
• 11

  ACLs and OneFS

• 1

  SID history

• 1

  Access checks with tokens and file permissions

• 1

  OneFS ACL policies

• 1

  OneFS Permission Repair

• 1

  Introduction to Role Based Access Control
• 2

  Privileges available in non-System access zones
• 3

  Authentication provider behavior between RBAC and ZRBAC
• 4

  Multi-instance Active Directory authentication provider

• 1

  SSH multifactor authentication with Duo

• 1

  SAML-based SSO for WebUI

• 1

  PowerScale migrations and permissions

• 1

  Troubleshooting and commands
• 2

  Anatomy of a cross-platform access token
• 3

  Anatomy of a cross-platform file permission

• 1

  Documentation
• 2

  Required fields for LDAP
• 3

  Microsoft Active Directory with RFC 2307
• 4

  Required fields for Windows Services for UNIX
• 5

  Permission mapping

• 1

  Appendix B: Additional resources