■
Authentication in a CIFS Environment
To allow CIFS access, user authentication settings are required. The ETERNUS DX supports login authentication
with the Active Directory authentication server (Kerberos authentication method) and local user authentication.
The ETERNUS DX supports Active Directory's one-way and two-way explicit trust relationships. For example, when
the trusting domain is set in the ETERNUS DX, setting the trust relationship of the domains as one-way or two-
way gives the trusted domain user access to the ETERNUS DX.
File access control information is stored for each directory or file in a CIFS environment in the same way as in a
normal Windows environment.
Access privileges to read and write to shared folders can be assigned for each user or each group.
Authentication is not required for a client that previously accessed the Active Directory authentication server. To
access from a client that is not registered in the Active Directory authentication server, specify the username in
the following format.
netbios_domain_name\Username
Example: domain\user1
IMPORTANT
During the design phase
The time in the ETERNUS DX and the Active Directory authentication server must be synchronized to
perform operations with the Active Directory authentication server. Automatic time correction by the
Network Time Protocol (NTP) is recommended.
Note
During the configuration phase
•
For Active Directory authentication, the NAS Engine of the ETERNUS DX uses the first 14 letters of the
NAS server name plus the CM number ("0" or "1") as a computer name.
For details on the ETERNUS DX's NAS server name, refer to
"NAS Server Name (Host Name)" (page 172)
.
•
Active Directory's two-way, transitive trust relationships are not supported.
•
The maximum number of users that can be managed using Active Directory is 100,000.
4. NAS Functions
User Management
175
Design Guide
Summary of Contents for ETERNUS DX S5 Series
Page 335: ......
