1 .TH l_getidentity 1 "Dec 7, 2016" Lustre "utilities"
3 l_getidentity \- Handle Lustre user/group cache upcall
5 .B "l_getidentity {-d | mdtname} uid"
7 The identity upcall command specifies the path to an executable that,
8 when properly installed, is invoked to resolve the numeric
10 to a group membership list.
13 is the reference implementation of the user/group cache upcall.
14 This command is normally run directly by the Lustre MDS service
17 argument for the MDT that should be updated.
19 .SS "The permissions file"
21 .I /etc/lustre/perm.conf
22 supports a flat file database of permissions in the format
24 UID<space>NID<space>perm1,perm2,...,permN
40 modules can be enabled for auth handling by adding a
42 command with a list of nss modules to the first line of
45 At the time of writing, known
48 .BR lustre ", " nss_files ", " ldap ", " nis ", " sss ", and" systemd
49 additional modules may be documented in
51 or installed separately.
56 modules are searched in order. Once an entry is found in
57 the module no further modules are searched.
63 module is used to enable lustre specific password and group
71 For historical reasons
73 was originally used instead in place of
75 to enable auth by lustre files. At the time of writing
77 is still widely used where
80 This alias is now officially deprecated and using it will generate periodic
81 warnings. The alias will be removed in a future release.
84 can be specified for the
91 Run in debug mode and print supplementary groups information for
95 instead of updating Lustre.
97 The identity upcall command can be specified via:
99 .RI "lctl set_param mdt." mdtname .identity_upcall= path_to_upcall
103 Enable lustre auth and ldap
105 [/etc/lustre/perm.conf]
107 .B lookup lustre ldap
113 root:x:0:0:root:/root:/bin/bash
123 Lustre passwd and group files use the same format as the system
129 In this configuration root is local to the cluster and all other perms are delegated to ldap.
132 A maximum of 8 nss modules can be enabled.
135 .RI /{proc,sys}/fs/lustre/mdt/ mdt-service /identity_upcall
137 .RI /etc/lustre/perm.conf
139 .RI /etc/lustre/passwd
141 .RI /etc/lustre/group
147 Lustre Programming Interfaces section of Lustre Operations Manual.