PIIDENTMAP attributes

IdentMap

The name of the PI mapping. This must be unique, but is not case-sensitive. This field is required to create a new mapping.

Desc

Optional text describing the mapping. There are no restrictions on the contents of this field.

Flags

Bit flags that specify optional behavior for the mapping. There are two options:

• 0x01 = Mapping is inactive and will not be used during authentication.

• 0x00 = (Default value). Mapping is active and will be used during authentication after initial setup.

IdentMapID

A unique integer that corresponds to the identity mapping. The system will automatically generate the value upon creation. Value will not change for the life of the identity mapping.

PIIdent

Name of the PI identity to which the security principal specified by Principal will be mapped. The contents of this field must match Ident in an existing entry in the PIIDENT table. The target identity must not be flagged as Disabled or MappingDisabled. Multiple IdentMap entries can map to the same PIIdent entry.

This field is required to create a new identity mapping.

Principal

The name of the security principal (domain user or group) that is to be mapped to the identity named in PIIdent.

For principals defined in an Active Directory domain, the format of input to this field can be any of the following:

• Fully qualified account name (my_domain\principal_name)

• Fully qualified DNS name (my_domain.com\principal_name)

• User principal name (UPN) (principal_name@my_domain.com)

• SID (S-1-5-21-nnnnnnnnnn-…-nnnn).

  For security principals defined as local users or groups, only the fully qualified account name (computer_name\principal_name) or SID formats may be usedcomputer_name. Output from piconfig for this field will always be in SID format, regardless of which input format was used.

  This field is required to create a new identity mapping.

PrincipalDisp

User-friendly rendering of the principal specified by Principal. This is an output-only field. The principal name will be displayed in the fully-qualified account name format.

Type

This is a reserved field indicating the type of the mapping. In this release, this attribute is always set to 1.