List Representations of an Identity

Michael Khmelnitsky

Updated April 27, 2022 22:18

REQUIREMENTS

Cluster running Qumulo Core 2.11.0 and above
Command line (CLI) tools installed via API & Tools tab

DETAILS

With the release of 2.11.0, a new command is available to output all the representations of an identity including the user/group names, POSIX uid/gid, SIDs, and internal auth_ids that the Qumulo file system uses. This command will work with local users/groups, AD, and LDAP if configured on a cluster.

Run any of the following commands to list all representations of an identity:

qq auth_find_identity IDENTIFIER
qq auth_find_identity --auth-id AUTH-ID
qq auth_find_identity --name NAME
qq auth_find_identity --uid UID
qq auth_find_identity --gid GID
qq auth_find_identity --sid SID
qq auth_find_identity --domain {LOCAL,WORLD,POSIX_USER,POSIX_GROUP,ACTIVE_DIRECTORY}

The identifier argument will be the name optionally qualified with a domain prefix (e.g "local:name", "world:Everyone",
"ldap_user:name", "ldap_group:name", or "ad:name") or an ID type (e.g. "uid:1001", "gid:2001","auth_id:513", "SID:S-1-1-0").

Reference the following examples to see this command in action:

EXAMPLE:
qq auth_find_identity local:picasso

domain: LOCAL
name: picasso
auth_id: 1031
SID: S-1-5-21-1203876804-525990034-1406135336-1031

EXAMPLE:
qq auth_find_identity --name ABE

domain: LOCAL
name: ABE
auth_id: 1003
SID: S-1-5-21-1203876804-525990034-1406135336-1003