Querying Users

Prev Next

Querying a User in VAST Web UI

  1. From the left navigation menu, choose User Management and then Users.

  2. In the Users tab, click the Query Users button (query_user_button.png).

  3. In the Query User dialog, in the Context field, select which provider(s) to query:

    • Local. Searches the local provider.

    • Aggregated. Searches all providers and retrieves a merged user entry. In case of conflicts between providers, attributes are resolved according to the following rules:

      • In case of conflict between local and non local providers, the local provider's attributes override those of the other providers.

      • In case of conflicting POSIX attributes on external providers, the POSIX primary provider overrules the other external provider.

      • Users are merged if their match user attributes match. The match user attribute is configurable in that you can set which attribute on the POSIX primary provider is used to match the users.

      • All groups found for the user on all providers with distinct group names are treated as distinct groups to which the user belongs. Groups are merged if they match according to a non-configurable group name attribute.

    • AD, NIS or LDAP. Searches the specific provider only. (Each of these options appears only if a provider of that type is connected to the cluster.)

  4. Enter one user attribute value to search for in the field provided for the attribute. You can search for any of the following:

    • UID (POSIX (NFS) user ID)

    • Username

      To query a user from the cluster's joined domain, enter the user name in the field provided without specifying the domain name suffix.

      To query a user from domains in other trusted forests, enter the user name followed by the domain name suffix: <user name>@<domain name>.

      Note

      Querying groups from non-joined domains requires multi-forest authentication to be enabled on the cluster.

    • SID (SMB user SID)

    • Login name

    Note

    Enter the entire exact string. Partial values and wildcards are not supported.

  5. Click Query.

    If no user is found, an error message appears ("No user matches the given query") and the dialog remains open so that you can run another query.

    If a user is found that matches the query, the user's details are displayed in the Users tab. The context of the recent query is shown by the context indicator above the grid (for example: LocalContext.png).

    -1 is returned for fields where an empty string was retrieved from the provider.

Tip

For an aggregated query, you can see which provider each attribute was retrieved from. Open the Actions menu for the user and select Edit. In the Update User dialog, the provider is displayed below each attribute that was retrieved for the user.

Tip

To clear the query, click the clear query button: clear_query_button.png. The default listing of any and all local users is restored in the tab.