Setting the Primary POSIX Provider

Prev Next

If a tenant is connected to two external authorization providers, one of the providers is always set to be the POSIX primary provider. If both providers have POSIX user attributes, then in case of any conflict between POSIX attributes that are retrieved from the providers, the POSIX primary takes precedence over the other provider.

Setting the POSIX primary provider enables you to make sure that conflicting query results are resolved in favor of the provider that stores the correct POSIX attributes for users. For more information about how providers are queried, see Overview of User Management and Authorization.Overview of User Management and Authorization

You can set the POSIX primary provider per tenant when you create or modify a tenant.

Viewing the POSIX Primary Provider

To check which provider is set is the POSIX primary provider per tenant:

  • In VAST Web UI, open the Tenants page (Element Store -> Tenants) and look at the Posix Primary column.

    Tip

    If the column is not displayed, click column_menu.png to the right of any column's title, and then click columns.png to open a dropdown that lists all tenant fields. In the dropdown, select Posix Primary to unhide the column.

  • In  VAST CLI, run the tenant show command.

Changing the POSIX Primary Provider via VAST Web UI

  1. In the left navigation menu, select Element Store and then Tenants.

  2. Open the Actions menu for your tenant and select Edit.

  3. In the Update Tenant dialog, go to the Providers tab and select a new POSIX primary provider in the POSIX Primary Provider dropdown.

  4. Click Update to save your changes.

Changing the POSIX Primary Provider via VAST CLI

Run the tenant modify command with the --posix-primary-provider option specified. For example:

vcli: admin>  tenant modify --id 2 --posix-primary-provider LDAP