Managing protocol user authentication

The system administrator can configure authentication for both object and file access either during the installation of the system or after the installation. If the authentication configuration is not configured during installation, you do it manually with the mmuserauth service create command from any node in the IBM Spectrum Scale cluster. This section covers the manual method of configuring authentication for file and object access.

Client system authentication requirement: When you use GPFS clients or the NFS or SMB protocol to access the files in an IBM Spectrum Scale file system, the authentication and ID mapping of users and groups must be configured on the client operating system on which the file system or share is mounted. You must configure the appropriate directory services (AD/LDAP/NIS) on that operating system, and users and groups must be able to log in with their user IDs and group IDs. These are the actual credentials that the file system will use to authenticate users and groups who try to access the file system through the GPFS clients.