Authentication Modes - HPE StoreOnce 6500 User Manual

Authentication modes

None
Provides a simple CIFS server configuration that allows for the creation of shares with no authentication.
Any user or computer can mount and access the shares created on the StoreOnce System with this
setting. This mode is the default authentication mode for the CIFS server where all the Shares configured
have its Permission disabled. Because this mode is the default, there is no user action required to
activate this mode. Proceed to mounting the share on your Windows client.
User
Provides a method of securing the CIFS shares to be accessed only by specified users with local account
credentials configured on the StoreOnce appliance. Once the CIFS server is configured to User mode,
you can set permissions for existing users to Access or No Access and create users on the Permissions
tab of the share.
AD
Provides a method of securing the CIFS shares to be accessed only by specified users or groups within
an Active Directory domain to the CIFS Server.
IMPORTANT: To allow Active Directory users to log into the Appliance GUI or CLI to perform
management tasks, you must first configure the CIFS server settings to AD.
To use external Active Directory users or groups on the StoreOnce System (using the GUI or CLI
function) to perform management tasks, use the NAS CIFS server tab to set the Authentication
mode to AD, join an AD domain, and assign any required delegated users or groups. This step is
required even when not using NAS shares as target devices. The external users and groups are
created in the Active Directory domain controller.
When granting access to external user or groups to the management GUI and CLI, HPE
recommends using the same Active Directory domain server across all couplets in the cluster rather
than a unique Active Directory domain server for each couplet.
Prerequisites:
• Domain Name
• Domain Controller running:
◦ Windows server 2003
◦ Windows server 2003 R2
◦ Windows server 2008
◦ Windows server 2008 R2
◦ Windows server 2012
◦ Windows server 2012 R2
• To join an AD domain with IPv6, the Domain Controller must be configured using IPv6 only. If the
Domain Controller is configured with both IPv4 and IPv6 addresses, the StoreOnce appliance will
default to IPv4 to join the AD domain.
• A user account on the Domain Controller, which is the Domain Administrator or delegated user with
Domain Administrative rights.
46 Authentication modes