Adaptec 5325301656 - Snap Server 14000 NAS, Руководство администратора

Страница: 41 / 224

Windows Networking Configuration
Chapter 2 Network Access to the Server 27
still see these shares. To completely hide shares from visibility from any protocols,
the
Security > Shares
screen gives you access to a separate and distinct Hidden
share option that hides a share from SMB, AFP, HTTP, HTTPS, and FTP clients
(However, shares are not hidden from NFS clients, which cannot connect to shares
that aren't visible. To hide shares from NFS clients, consider disabling NFS access
on hidden shares). For new shares, select
New
and click the
Advanced
button to
access the Hidden share option. For existing shares, select the share, click
Properties
, and click
Advanced
to access the Hidden share option.
Support for Windows Network Authentication
This section summarizes important facts regarding the GuardianOS
implementation of Windows network authentication.
Windows Networking Options
Windows networks use a domain controller to store user credentials. The domain
controller can validate all authentication requests on behalf of other systems in the
domain.
Kerberos Authentication
Kerberos is a secure method for authenticating a request for a service in a network.
Kerberos lets a user request an encrypted “ticket” from an authentication process
that can then be used to request a service from a server. The user credentials are
always encrypted before they are transmitted over the network.
The Snap Server supports the Microsoft Windows implementation of Kerberos. In
Windows Active Directory (ADS), the domain controller is also the directory server,
Option Description
Workgroup In a workgroup environment, users and groups are stored and
managed separately on each server in the workgroup.
Domain
(NT or ADS)
When operating in a Windows NT or Active Directory domain
environment, the Snap Server is a member of the domain and the
domain controller is the repository of all account information. Client
machines are also members of the domain and users log into the
domain through their Windows-based client machines. Windows or
Active Directory domains resolve user authentication and group
membership through the domain controller.
Once joined to a Windows NT or Active Directory domain, the Snap
Server imports and then maintains a current list of the users and
groups on the domain. Thus, you must use the domain controller to
make modifications to user or group accounts. Changes you make
on the domain controller appear automatically on the Snap Server.