Adaptec 5325301638 - Snap Server 4500 NAS, Руководство администратора

Страница: 40 / 148

Windows Workgroup or Domain
26 Snap Server Administrator Guide
Windows Networking Options
Windows networks use a domain controller to store user credentials. The domain
controller can validate all authentication requests on behalf of other systems in the
domain.
Kerberos Authentication
Kerberos is a secure method for authenticating a request for a service in a network.
Kerberos lets a user request an encrypted "ticket" from an authentication process
that can then be used to request a service from a server. The user credentials are
always encrypted before they are transmitted over the network.
The Snap Server supports the Microsoft Windows implementation of Kerberos. In
Windows 2000/2003/XP, the domain controller is also the directory server, the
Kerberos key distribution center (KDC), and the origin of group policies that are
applied to the domain.
Support for Microsoft Name Resolution Servers
The Snap Server supports both Microsoft name resolution services: Windows
Internet Naming Service (WINS) and Dynamic Domain Name Server (DNS).
However, when you use a dynamic domain server or a domain name server with an
ADS server, make sure the forward and reverse name lookup is correctly set up.
Interoperability with Active Directory Authentication
The Snap Server supports the Microsoft Windows 2000 family of servers that run in
native ADS mode or in mixed NT/ADS mode. Snap Servers can join Active
Option Description
Workgroup In a workgroup environment, users and groups are stored and
managed separately on each server in the workgroup.
Domain
(NT or ADS)
When operating in a Windows NT or Active Directory domain
environment, the Snap Server is a member of the domain and the
domain controller is the repository of all account information. Client
machines are also members of the domain and users log into the
domain through their Windows-based client machines. Windows or
Active Directory domains resolve user authentication and group
membership through the domain controller.
Once joined to a Windows NT or Active Directory domain, the Snap
Server imports and then maintains a current list of the users and
groups on the domain. Thus, you must use the domain controller to
make modifications to user or group accounts. Changes you make
on the domain controller appear automatically on the Snap Server.