User Authentication With An External Smb Server - Buffalo TeraStation TS3400D User Manual

Notes:
• If you change the TeraStation's name, you will no longer be able to use domain users and groups or access
restrictions. To repair this, rejoin the domain.
• If both read-only and read & write permissions are given to a user, the user will have read-only access.
• If a domain username is more than 20 bytes long, the TeraStation truncates it to 20 bytes.
• To use the TeraStation as a member server in an NT domain, the TeraStation should be logged in to the
domain and accessed from a computer that is not a member of the domain with a valid domain account.
• If the TeraStation is a member server of an NT domain, you cannot connect as a guest user via AFP.
• When you change the user or group settings on the domain controller, these changes may not take effect
immediately on the TeraStation until it is rebooted.
• If your TeraStation is a member server in an NT domain and you change the authentication method to
"Workgroup", the account on the domain controller will not be deleted automatically.
• If FTP is enabled, local and domain group access restrictions from the NT domain network do not work. Use
user access restrictions instead.
• Don't disable the SMB protocol while an NT domain server is used for access restrictions. If you do, you will
need to enable SMB again and reconfigure the NT domain settings from scratch.
• For an access-restricted shared folder, if you change the access restrictions of all users and groups from read
& write or read only to access prohibited from the user or group list page in Settings, that shared folder can
only be accessed by admin users and groups.

User Authentication with an External SMB Server

TeraStations on your network can be linked to an external authentication server for centralized management of user
accounts and passwords. The authentication server should be another TeraStation or a LinkStation. Other external
SMB authentication servers are not supported.
Notes:
• Disable SMB2 before using external authentication.
• Access restrictions for local users and groups will still apply to shared folders if an external SMB server is used
for authentication.
• The procedure below contains methods to automatically register external users. You can also manually add
external users by converting them from local users. Refer to the "Converting Local Users into External Users"
section below for more details on converting local users.
1
In Settings, click Network.
2
Click to the right of "Workgroup/Domain".
3
Click Edit.
33