
UNIX File System Management
130
NAS 1000s Administration Guide
Password Synchronization
Password synchronization is an optional service that automatically synchronizes Windows
passwords with UNIX passwords across multiple machines or environments. This service is
included on the NAS 1000s, but it is not activated.
Figure 75: Password Synchronization screen
Password synchronization ensures that the machines contain identical and most current user
password database. When the user or administrator changes a password, the new password is
updated across all target machines.
Without password synchronization, the user could have different passwords on different
machines. If the administrator or user changed the password, the change would affect only that
single machine.
Password Synchronization Best Practices
■
Install Password Synchronization on all domain controllers to ensure consistent
synchronization of the Domain and the UNIX passwords.
■
Ensure consistent password policies.
If you are providing Windows to UNIX password synchronization, make sure the
Windows password policy is as restrictive in all areas as the UNIX policy. Failure to
ensure that password policies are consistent may result in synchronization failure.
■
Avoid synchronizing administrator passwords.
Do not synchronize passwords for members of the Windows Administrator groups or the
passwords of UNIX Superuser or Root accounts.
— When Password Synchronization is installed, members of the local Administrators or
Domain Administrators group are added to the PasswordPropDeny group, which
prevents their passwords from being synchronized. If you add a user to either the
Administrators or Domain Admins group, be sure to add the user to the
PasswordPropDeny group.
— The sync_users statement in the sso.conf file on UNIX systems prevents the
passwords of Superusers from being synchronized.
Содержание StorageWorks NAS 1000s
Страница 38: ...Setup Completion and Basic Administrative Procedures 38 NAS 1000s Administration Guide ...
Страница 78: ...User and Group Management 78 NAS 1000s Administration Guide ...
Страница 104: ...Folder and Share Management 104 NAS 1000s Administration Guide ...
Страница 134: ...UNIX File System Management 134 NAS 1000s Administration Guide ...
Страница 166: ...PSM Error Codes 166 NAS 1000s Administration Guide ...
Страница 172: ...Index 172 NAS 1000s Administration Guide ...