Get a Quote     (408) 943-4100               TrueNAS Discord      VendOp_Icon_15x15px   Commercial Support Toggle between Light and Dark mode
TrueNAS.com Software Systems Company Community Security iX Portal Download

  1. Documentation Hub
  2. /
  3. TrueNAS CORE and Enterprise
  4. /
  5. UI Reference Guide
  6. /
  7. Directory Services
  8. /
  9. Idmap Screen
Edit this page

Idmap Screen

  2 minute read.

Last Modified 2022-08-15 13:37 -0400

On a system running Unix or a Unix-like OS, Idmap acts as a translator. Windows Security Identifier (SID)s convert to a user ID (UID) and group ID (GID). Use the Identity Mapping (Idmap) screen to configure Idmap service on the TrueNAS.

Click Edit IDMAP on the Active Directory > Advanced Options screen. The Edit Idmap screen displays. It lists all domains configured on the TrueNAS.

DirectoryServicesldmapScreenn

You can customize the information displayed in the Idmap table. Click the blue COLUMNS button to display a dropdown list of options. A check mark next to the option name means the column is currently visible. Select from Unselect All, Backend, DNS Domain Name, Range Low, Range High, Certificate or Reset to Defaults.

Click ADD to open the Idmap Add screen. Enable Active Directory before attempting to add new domains.

Click the icon to display the options for each domain, Edit or Delete.

Idmap Settings

Name Description
Idmap Backend Select the plugin interface for Windbind to use from the dropdown list. Plugin interfaces for Windbind use varying backends. These backends store SID/uid/gid mapping tables. The correct setting depends on the NAS deployment environment.
Name Enter the pre-Windows 2000 domain name or select from the dropdown list.
DNS Domain Name Enter the DNS name of the domain.
Range Low Determines the range of UID/GID numbers which this Idmap backend translates. External credentials like a Windows SID must map to a UID or GID number inside this range. Ignores external credentials outside this range.
Range High Determines the range of UID/GID numbers which this Idmap backend translates. External credentials like a Windows SID must map to a UID or GID number inside this range. Ignores external credentials outside this range.
SSSD Compat Select to generate Idmap low range based on same algorithm that SSSD uses by default.

Click SAVE to save settings and return to the Idmap screen.

Click CANCEL to exit without saving and return to the Idmap screen.

Related Idmap Articles

Related Content