HP J3278B - SureStore CD-ROM Server/Tower 7 NAS Server User Manual page 57

User-Level Access Control
You can implement user-level security authenticated by an NT
domain controller. A user logging in to the server must provide
her identity (name and domain) and password. The server uses
this information to validate her identity against the primary
domain controller (PDC). It actually logs in to the PDC, reads
the user's group membership, and then logs out. If its login is
successful, the user is allowed access to the server.
For SMB, the server maintains an administrator account that is
never authenticated against the primary domain controller,
because some method of access must be maintained in case the
PDC becomes unavailable.
For this access control, set the following SMB (Windows) para-
meters (stored in the config.ini file in the config folder):
Parameter Name
SecurityMode
Authentica-
tionDomain
Administra-
torPassword
Logging in. Then, to log in as the local administrator on the
server, you will need to specify:
•
Domain: the name of the server
•
User: the administrator
•
Password: the contents of AdministratorPassword
parameter (see above)
Controlling Rights. Under user-level SMB access control,
security rights can be set individually or by group membership.
The SMBUser/Group access-control parameter is used to create
entries for the user and group rights (in the relevant files stored
in the volumes folder). There can be as many of these entries as
needed in a particular file.
Value Description
Implements user-level access con-
trol (authentication against PDC),
userLevel
rather than share-level control.
Name of the domain that all user's
<15-byte
identities are verified against.
string>
User's account must reside within.
Password of the local administrator
of the server (not the same as an
<15-byte
administrator with an account in the
string>
domain).
Setup for Microsoft Networks (SMB) 4-15