IBM Support

How to configure NFS Server for IGI

How To


Summary

The IBM Security Identity Governance and Intelligence Knowledge Center lacks details on how to configure a Windows NFS Server with IGI. This technote contains step by step instructions on how to configure an NFS Server running on a Windows System, and then setup this via the IGI LMI to utilize the NFS mount.

Objective

Augment Knowledge Center documentation for NFS Mount configuration by adding Windows instructions:
https://www.ibm.com/support/knowledgecenter/en/SSGHJR_5.2.5/com.ibm.igi.doc/installing/tsk/t_connector_nfs.html

Environment

Windows 2016 (also applies to 2012)
IBM Security Identity Governance and Intelligence 5.2.x

Steps

Create the NFS Share directory

Use Windows Explorer or command line to create a new directory - example C:\igi-share.

Next, define Security Properties for the directory:

image-20190604152711-1

**NOTE: Select Security and add Everyone as shown above.  When you do not, you may see this error when querying the files on mount ponit.

**NOTE: If Everyone group does not exist, then you must add it.

Select NFS Sharing > Manage NFS Sharing

Set the following as shown

image-20190604152711-2

Add IGI Servers  

Select Permissions
Set All Machines to NO ACCESS

image-20190604152711-3

Select ADD to add the IGI Servers

image-20190604152711-4

Make sure to enable  Allow Root Access

**NOTE: The names added in the NFS Share permissions must resolve.

Resulting properties

image-20190604152711-5

Verify

To verify the NFS share from a Linux server, enter the following

[demouser@centos ~]$

showmount -e 9.48.172.94

Export list for 9.48.172.94:

/igi-share igi525ap.iamlab.ibm.com,igi525va.iamlab.ibm.com

Create NFS client on IGI

Open IGI VA Console  > Manage > Network File System > New

image-20190604152711-6

Finally, use the "Save Configuration" button to create the NFS mount point on the IGI virtual appliance.


Document Location

Worldwide


[{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSGHTN","label":"IBM Security Identity Governance and Administration"},"Component":"ALL","Platform":[{"code":"PF032","label":"VM"}],"Version":"","Edition":"5.2.2,5.2.3,5.2.4,5.2.5","Line of Business":{"code":"LOB24","label":"Security Software"}},{"Business Unit":{"code":"BU059","label":"IBM Software w\/o TPS"},"Product":{"code":"SSGHTN","label":"IBM Security Identity Governance and Administration"},"Component":"","Platform":[{"code":"PF032","label":"VM"}],"Version":"5.2.1,5.2.2,5.2.3,5.2.4,5.2.5","Edition":"","Line of Business":{"code":"LOB24","label":"Security Software"}}]

Historical Number

TS002228430

Product Synonym

IGI
ISIG
Governance

Document Information

More support for:
IBM Security Identity Governance and Administration

Operating system(s):
VM

Document number:
886095

Modified date:
05 June 2019

UID

ibm10886095