napp-it ZFS Storage, Руководство пользователя

Страница: 33 / 63

12.1 Active Directory
With a few users especially if you use only one or two fileservers, a simple local user management is
sufficient, simple and idiot proof. With more users, many servers you need to have the same credidentials
on any machine. To achieve this you need a centralized user database like Ldap or Active Directory.
The Solaris CIFS server is prepared to be a member computer in an AD environment.
You can join a Domain with menu „Services >> SMB >> Active Directory
Enter:
Domainname ex
ex myuniversity.edu
IP-Adress of your AD-Master server ex: 172.16.1.11
Domainadmin username: admin
Domaiadmin password: *****
When you click submit, OmniOS syncronizes time and sets DNS to your AD server and joins the domain.
If OmniOS lost connectivity to your AD server, you can disable/enable the SMB service or rejoin the domain.
Care about
Your napp-it Server can be either a member of a workgroup (use local user)
or a domain (can use either local or domain user).
If you switch from domain to workgroup-mode, remove all mappings with idmap remove -a
If you join a domain, you should create at least one idmapping (give domainadmin root permission):
Other mappings are not needed, replace domainadmin with your admin username.
idmap add winuser:domainadmin unixuser:root
Possible Problems:
If you get a „UNSUCCESSFULL“ error
If you want to join a domain newly, please verify that your domain does not already have a
computer member with the name of your OmniOS server. In this case you get UNSUCCESSFULL
other reasons for UNSUCCESSFULL:
- wrong username/password
Sometimes UNSUCCESSFULL happens for unknown or timeout reasons.
- If you try again a second or third time it may work.
If you get a „INTERNAL ERROR“
- Check if SMB service is online (you must have enabled a SMB share)
If you get a „Failed to find any domain controller“
- check network, ip and DNS settings
- try another lmauth level (4 is ok for Windows 2012)