Best practices for configuring AD with RFC2307 as the authentication method

It is recommended to adhere to the following best practices if you configure AD with RFC2307 as the authentication method:

• Remove any internal ID mappings present in the system before you configure AD with RFC2307. Otherwise, the system might detect the internal ID mappings instead of the RFC2307 ID mapping and abort the operation with an error message. In such situations, you are expected to clean up the entire authentication and ID mapping by using the mmuserauth service remove and mmuserauth service remove --idmapdelete command and then reconfigure AD authentication and RFC2307 ID mapping.
• If data is already present on the system, a complete removal of the authentication and ID mapping can cause permanent loss of data access.
• Using UIDs and GIDs greater than 1000 can avoid an overlap of IDs used by end users, administrative users, and operating system component users of the IBM Spectrum Scale™ system.

You can use AD-based authentication and RFC2307 ID mapping if you want to use the AFM feature of the IBM Spectrum Scale system.