Figure 91 Process For Acquiring The Authentication Information (Nfs) - Fujitsu ETERNUS DX S5 Series Design Manual

4. NAS Functions
User Management
Figure 91
2. Reference the information to
authenticate the access request
Windows client
●
Policies Related to the Operation Design of the Authentication Information
• For users who use the CIFS protocol and the NFS protocol
The relevant username and group name need to be set in the AD authentication server and the LDAP
authentication server.
1
Register the user in the AD authentication server
After the user registration, check the user's Relative ID (RID). RID is a part of the Security ID (SID).
For a SID value of "S-1-5-21-xxxx-yyyy-zzzz-nnnn", the RID value is indicated by the "nnnn" portion.
2
Register the user in the LDAP authentication server
Set the following values to UID and GID.
The RID value obtained when the user is registered in the AD authentication server + 10,000,000
For users who use only the NFS protocol
•
The relevant username and group name need to be set in the LDAP authentication server.
In the LDAP authentication server, set a UID and GID value within the following range.
1,005 – 9,999,999
• For users who use only the CIFS protocol
No consideration is needed.
Process for Acquiring the Authentication Information (NFS)
Active Directory authentication server
CIFS
Shared folder A
3. Reference the information to
LDAP authentication server
NFS
Shared folder B
ETERNUS DX
178
authenticate the access
request (only if the AD
authentication server lacks the
authentication information)
LAN
1. Request access to the
shared folder
UNIX / Linux client
4. Respond to the
access request
Design Guide