In this page we explain what is a MCF authority connection, how to create one for a share file and finally how to ask directly MCF in order to see the ACLs retrieved.
...
2.How to create a MCF authority connection for a Windows file share
MCF provides a early-binding authorization mechanism for file searchs. MCF extracts ACLs from files at crawling-time, and injects them into Solr as specific fields for the Solr document.
At query time, an external application can query Solr for documents that are available for a specific user profile. Solr handles the query, contacts the authority service of MCF in order to ask for information on the authenticated user, such as its group membership. Solr then performs the query and filters the query results with this information.
In Datafari the Solr schema is already configured to store ACL and the MCF security plugin on the search handler is also present. So you have just to configure the MCF authority connection in the MCF admin UI.
So go to MCF admin UI then Create a new Authority, select the connection type “Active Directory” and add the configuration of your AD in the tab Domain Controller as the following screenshot :
Change the configuration of your windows share connector to link it with your AD connector :
Create a crawl Job and configure it as you want.
...