Get a Quote     (408) 943-4100               TrueNAS Discord      VendOp_Icon_15x15px   Commercial Support Toggle between Light and Dark mode
TrueNAS.com Software Systems Company Community Security iX Portal Download

  1. Documentation Hub
  2. /
  3. TrueNAS SCALE
  4. /
  5. UI Reference Guide
  6. /
  7. Credentials
  8. /
  9. Directory Services
  10. /
  11. Idmap
Edit this page

Idmap

  2 minute read.

Last Modified 2022-12-06 15:13 -0500

Click an Idmap name to edit an Idmap, or click Add in the Credentials > Directory Services Idmap widget to open the Idmap form.

DirectoryServicesIdmapForm

Setting Description
Name Enter the pre-Windows 2000 domain name.
Idmap Backend Provides a plugin interface for Winbind to use varying backends to store SID/uid/gid mapping tables. The correct setting depends on the environment you deployed the NAS in.
DNS Domain Name DNS name of the domain.
Range Low Range Low and Range High set the range of UID/GID numbers the IDMap backend translates. If an external credential like a Windows SID maps to a UID or GID number outside this range, TrueNAS will ignore it.
Range High Range Low and Range High set the range of UID/GID numbers the IDMap backend translates. If an external credential like a Windows SID maps to a UID or GID number outside this range, TrueNAS will ignore it.

Options

Some options only display when either adding or editing an Idmap.

Setting Description
Schema Mode Choose the schema to use with LDAP authentication for SMB shares. The LDAP server must be configured with Samba attributes to use a Samba Schema. Options include RFC2307 (included in Windows 2003 R2) and Service for Unix (SFU). For SFU 3.0 or 3.5, choose “SFU”. For SFU 2.0, choose “SFU20”.
Unix Primary Group When checked, the primary group membership is fetched from the LDAP attributes (gidNumber). When not checked, the primary group membership is calculated via the “primaryGroupID” LDAP attribute.
Unix NSS Info When checked, winbind will retrieve the login shell and home directory from the LDAP attributes. When not checked or when the AD LDAP entry lacks the SFU attributes the smb4.conf parameters template shell and template homedir are used.
SSSD Compat Generate Idmap low range based on the same algorithm that SSSD uses by default.