Intel SS4000-E - Entry Storage System NAS Server User Manual page 64

Managing Your Storage System
Note: If the storage system uses Active Directory authentication mode, this button displays
dimmed.
5. When prompted to confirm the removal, click OK. The group no longer displays in
the Groups list.
Changing Authentication Mode
Your Intel
•
Local authentication mode
•
Active Directory authentication mode
In local authentication mode, the storage system authenticates all users who try to connect
to shared folders, and you can add, modify, or remove all types of users (both Windows/
Mac OS X and Linux/other Mac users). By default, the storage system uses local
authentication mode.
In Active Directory authentication mode, the Active Directory server authenticates all
Windows users who try to connect to shared folders. You can add, modify, or remove
Linux /other Mac users, but not Windows users. In addition, you cannot create groups. All
Windows users and groups are controlled entirely by the Active Directory server.
Notes:
•
The authentication mode has no effect on backups performed using Client Backup and
Recovery.
•
If you use Active Directory authentication mode, the User must change password at
next logon check box must be cleared in the properties for each user on the Active
Directory server who will be accessing shared folders on the storage system. In
addition, each user's password can be no longer than 24 characters.
•
If you use Active Directory authentication mode, you must add any Mac OS X users
to your Active Directory server in order to provide those users with access to shared
folders on the storage system.
•
Active Directory authentication mode does not automatically include a guest account.
However, the Active Directory administrator can create one on the Active Directory
server.
•
"ftp" and "anonymous" are reserved for internal use. It is recommended that you do
not create user accounts with these names in the Active Directory server.
•
It is recommended that you select the root of all the Organization Units (OU) when
joining an Active Directory domain in order to have a listing of every user in every
OU. If you need to change the OU, you can switch to local mode and then rejoin the
domain. However, once you rejoin the domain, user rights to shares will need to be set
up again.
•
If you use Active Directory authentication mode, and the clocks of the storage system
and the Active Directory server differ by more than five minutes, errors will occur
when the storage system tries to connect to the Active Directory server. This is when
you set the authentication mode, when synchronization between the two systems
occurs, and when users access shared folders. It is recommended that you configure
48
®
Entry Storage System SS4000-E can operate in one of two modes:
®
Intel Entry Storage System SS4000-E User Guide