Delegating Authority To An External Smb Server - Buffalo LS410D User Manual

Notes:
• If you change the LinkStation's name, you will no longer be able to use domain users and groups or access restric-
tions. To repair this, rejoin the domain.
• If both read-only and read & write permissions are given to a user, the user will have read-only access. The most
restrictive attribute will apply.
• If a domain username is more than 20 bytes long, the LinkStation truncates it to 20 bytes.
• The LinkStation supports a domain environment with a maximum of 1000 users and 1000 groups. 10,000 users
and 10,000 groups can be downloaded from the domain controller but are not supported.
• To use the LinkStation as a member server in an NT domain, the LinkStation should be logged in to the domain
and accessed from a computer that is not a member of the domain with a valid domain account.
• If the LinkStation is a member server of an NT domain, you cannot connect as a guest user via AFP.
• When you change the user or group settings on the domain controller, these changes may not take effect imme-
diately on the LinkStation until it is rebooted.
• If your LinkStation is a member server in an NT domain and you change the authentication method to "Work-
group", the account on the domain controller will not be deleted automatically.
• If the LinkStation has joined a domain network, you cannot connect to it via FTP.
• Don't disable the SMB protocol while an NT domain server is used for access restrictions. If you do, you will need
to enable SMB again and reconfigure the NT domain settings from scratch.

Delegating Authority to an External SMB Server

LinkStations on your network can be linked to an authentication server for centralized management of user accounts
and passwords. The authenticationserver should be a TeraStation or another LinkStation.
Notes:
• Other external SMB servers are not supported. Use a TeraStation or a LinkStation for the authentication server.
• When saving changes to the external authentication server settings, click Yes to convert all local users to external
authentication users. If external authentication is disabled, local user passwords will need to be reconfigured.
• Make sure that SMB2 is disabled before using external authorization with Windows 8.
• Using external authentication may require the default security settings in Windows to be changed. An easy way
to do this is to run the File Sharing Security Level Change Tool, available from www.buffalotech.com. This simple
tool will let you change or restore your Windows security settings to work with external authentication.
1
In Advanced Settings, click Network.
2
Choose Workgroup/Domain.
3
Click Edit.
4
Select "Workgroup".
33