Adding other options to idmapd.conf

francisaugusto

Contributor
Joined
Nov 16, 2018
Messages
153
Hi,
Is there a way to add the `Local-Realms` option on idmapd.conf on TrueNAS? And is there a way to do it persistently?
I see that changes on the `idmap` session doesn't reflect on this file, so I wonder were can one change these things.
 

sretalla

Powered by Neutrality
Moderator
Joined
Jan 1, 2016
Messages
9,700
Maybe what you're looking for is under:

Credentials | Directory Services ... then enabling the Advanced options, which reveals the idmap section... if you can do what you need there, that would be the right answer.
 

francisaugusto

Contributor
Joined
Nov 16, 2018
Messages
153
Maybe what you're looking for is under:

Credentials | Directory Services ... then enabling the Advanced options, which reveals the idmap section... if you can do what you need there, that would be the right answer.
I can't. No option for setting `Local-Realms` there.
 

sretalla

Powered by Neutrality
Moderator
Joined
Jan 1, 2016
Messages
9,700
Then perhaps setting it in /usr/share/nfs-common/conffiles/idmapd.conf would be the only remaining option and accepting that it will be lost every time you edit something relevant to it from the GUI (or maybe when you upgrade versions).

Or @anodos may have some comments. (although to be fair, he's the SAMBA guy, so maybe not going to have a lot to say on the NFS bit we're talking about here even if he does deal with the AD/kerberos integration)
 
Last edited:

francisaugusto

Contributor
Joined
Nov 16, 2018
Messages
153
Then perhaps setting it in /usr/share/nfs-common/conffiles/idmapd.conf would be the only remaining option and accepting that it will be lost every time you edit something relevant to it from the GUI (or maybe when you upgrade versions).

Or @anodos may have some comments. (although to be fair, he's the SAMBA guy, so maybe not going to have a lot to say on the NFS bit we're talking about here even if he does deal with the AD/kerberos integration)
@anodos seems to have black belt on most stuff.. ;)
But very good tip, @sretalla . I will test that, actually.
 
Top