NFS Mapping a Disabled Account – How to Fix

nfs

Does Linux (non-AD joined) care if a mapped NFS users account is disabled in Active Directory?

For instance, I have an AD user account mapped in NFS to a Linux mount point. When I disabled that user account in AD, everything still works. Of course, when I delete that same user account in AD, access fails.

Does NFS access to the Linux mount point only relate to the UID mapping (irrespective of the accounts status in AD)?

Best Answer

How is Linux meant to access the account status in AD if it is not joined to the domain? Unless it is in the domain, or otherwise told to look to the domain for authentication, all it knows about is its own user database. So yes, NFS access to the mount point will depend only on the user credentials within Linux, unless you've established some way for that non-member Linux machine to query the AD DC for authentication. Which generally does mean the UID mapping, and the user credentials for that UID.

Related Topic