NFS: User Name Mapping LDAP Service Connection

Microsoft.Windows.FileServices.Service.NFS.6.3.Server.UserNameMapping.LDAPConnection (UnitMonitor)

This object monitors the User Name Mapping LDAP service connection and generates an alert if Server for NFS cannot connect to the LDAP server, if the alert is enabled for this monitor.

Knowledge Base article:

Summary

This object monitors the User Name Mapping LDAP service connection and generates an alert if Server for NFS cannot connect to the LDAP server, if the alert is enabled for this monitor.

User Name Mapping associates user accounts between Windows and UNIX domains so that users logged on to a UNIX domain can access shared resources on Windows without logging on separately to the Windows domain.

Causes

This monitor can enter a Critical health state if Server for NFS is not configured to use either Active Directory Domain Services (AD DS) or User Name Mapping as a Windows-UNIX identity mapping source.

If the health state is unknown, it means that monitoring has not yet begun for this object.

Resolutions

Configure Server for NFS to use an Active Directory Domain Services identity mapping source

To configure Server for NFS to retrieve identity mapping data from the LDAP service, use the following procedure:

1. Identify the domain that the LDAP service is running on as follows:

At an elevated command prompt on the affected server, type nfsadmin mapping to display identity mapping settings.

2. To enable Server for NFS to retrieve identity mapping data, type nfsadmin mapping config adlookup=yes addomain=[domain]

Note that addomain is not required if the computer is in the same domain as the Active Directory domain.

Verification

To verify that Server for NFS is properly configured for User Name Mapping, use the following procedure:

1. At an elevated command prompt, type nfsadmin mapping.

2. Verify that the AD Lookup field in the list is set to Enabled and that AD Domain is either blank or set to the name of the domain being used.

Note The Server for NFS service will default to the parent Active Directory domain for the computer, but this can be overridden by setting the AD Domain field in the mapping settings.

This monitor automatically resets to a Healthy state after Server for NFS is restarted.

Additional

Event ID 4016 (http://go.microsoft.com/fwlink/?LinkId=186621)

For more information about configuring mapping data, see Specify How Server for NFS Obtains Windows User and Group Information (http://go.microsoft.com/fwlink/?LinkId=185991).

For more information about configuring Server for NFS, see Services for Network File System (http://go.microsoft.com/fwlink/?LinkId=185983).

Element properties:

TargetMicrosoft.Windows.FileServices.Service.NFS.6.3
Parent MonitorMicrosoft.Windows.FileServices.Service.NFS.6.3.Server.UserNameMapping
CategoryAvailabilityHealth
EnabledTrue
Alert GenerateTrue
Alert SeverityMatchMonitorHealth
Alert PriorityNormal
Alert Auto ResolveTrue
Monitor TypeMicrosoft.Windows.2SingleEventLog2StateMonitorType
RemotableTrue
AccessibilityPublic
Alert Message
NFS: User Name Mapping LDAP Service Connection
Event Description: {0}
RunAsDefault

Source Code:

<UnitMonitor ID="Microsoft.Windows.FileServices.Service.NFS.6.3.Server.UserNameMapping.LDAPConnection" Accessibility="Public" Enabled="true" Target="Microsoft.Windows.FileServices.Service.NFS.6.3" ParentMonitorID="Microsoft.Windows.FileServices.Service.NFS.6.3.Server.UserNameMapping" Remotable="true" Priority="Normal" TypeID="Windows!Microsoft.Windows.2SingleEventLog2StateMonitorType" ConfirmDelivery="true">
<Category>AvailabilityHealth</Category>
<AlertSettings AlertMessage="Microsoft.Windows.FileServices.Service.NFS.6.3.Server.UserNameMapping.LDAPConnection_AlertMessageResourceID">
<AlertOnState>Warning</AlertOnState>
<AutoResolve>true</AutoResolve>
<AlertPriority>Normal</AlertPriority>
<AlertSeverity>MatchMonitorHealth</AlertSeverity>
<AlertParameters>
<AlertParameter1>$Data/Context/EventDescription$</AlertParameter1>
</AlertParameters>
</AlertSettings>
<OperationalStates>
<OperationalState ID="FirstEventRaised" MonitorTypeStateID="FirstEventRaised" HealthState="Warning"/>
<OperationalState ID="SecondEventRaised" MonitorTypeStateID="SecondEventRaised" HealthState="Success"/>
</OperationalStates>
<Configuration>
<FirstComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</FirstComputerName>
<FirstLogName>Microsoft-Windows-ServicesForNFS-Server/IdentityMapping</FirstLogName>
<FirstExpression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">4016</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft-Windows-ServicesForNFS-NFSServerService</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</FirstExpression>
<SecondComputerName>$Target/Host/Property[Type="Windows!Microsoft.Windows.Computer"]/NetworkName$</SecondComputerName>
<SecondLogName>Microsoft-Windows-ServicesForNFS-Server/IdentityMapping</SecondLogName>
<SecondExpression>
<Or>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft-Windows-ServicesForNFS-Server</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<Or>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">1007</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">1055</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">1005</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">1056</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</Or>
</Expression>
</And>
</Expression>
<Expression>
<And>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="String">PublisherName</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="String">Microsoft-Windows-ServicesForNFS-NFSServerService</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
<Expression>
<SimpleExpression>
<ValueExpression>
<XPathQuery Type="UnsignedInteger">EventDisplayNumber</XPathQuery>
</ValueExpression>
<Operator>Equal</Operator>
<ValueExpression>
<Value Type="UnsignedInteger">4010</Value>
</ValueExpression>
</SimpleExpression>
</Expression>
</And>
</Expression>
</Or>
</SecondExpression>
</Configuration>
</UnitMonitor>