ZyXEL Communications NSA-2400 User Manual page 52

Chapter 4 Sharing Screens
A conflict users is a local user that has the same user name as that of a user on a domain
controller .
mode) and later you change to domain mode where you create (or there are already) identical
users and groups, then they appear as in conflict on the NSA.
You cannot set a disk quota for users that are in conflict.
If you started in Domain mode and later you switch to Workgroup mode, the NSA will allow
you to create user names and group names that already exist on the domain controller.
If the conflicting domain user's password and local user's password are NOT the same, than
the two users are treated as two distinct users when using CIFS. Therefore, when using CIFS,
each user can only access shares to which they have been given access rights.
However, if the domain user's password and local user's password are also the same, then
only shares set to be accessible by the local user are actually accessible by both the domain
user and local user. The NSA has no way to distinguish these two users as their passwords and
user names are exactly the same.
During a conflict users situation, the local user takes precedence ONLY if the
domain user and local user's passwords are the same.
The situation is different for conflicting users when using FTP. For FTP if there are conflict
users, there will be no way for the FTP server to differentiate between the two user names.
Therefore, both domain user and local user can log in through FTP using their respective
passwords (regardless of whether they are the same or not) and be able to access all shares
accessible by EITHER the local user or domain user.
It is possible for the conflicting domain user to log in via FTP and access
shares that are supposed to be only accessible by the conflicting LOCAL user
and vice versa.
4.2.1.1 In Limbo and In Conflict Example
Suppose there is a local user named u1 and a domain user named u1.
• Share 1 is configured to be only accessible by the local user u1.
• Share 2 is configured to be only accessible by the domain user u1.
• Share 3 is configured to be accessible by BOTH the local and domain u1.
52
For example, if you first create local users and groups on the NSA (in Workgroup
NSA-2400 User's Guide