When accessing the NAS with the external authentication user, perform the procedure in "2.7.2.1 NAS Authentication Server Settings".
Setting Procedure
The procedure for registering a NAS authentication server in this product is described below.
When setting up an SMB authentication server
In CSG Web GUI, click [] on the global pane.
The Settings dialog box is displayed.
Click NAS access > NAS authentication server on the left pane.
The NAS authentication server list screen is displayed on the right pane.
Click Add in Action on the right.
The Register authentication server screen is displayed.
Enter the required information, and then click Done.
On the NAS authentication server list screen, confirm that the Active Directory server you registered has appeared.
Select a registered authentication server, and run Test in Action on the right. If the test fails, check whether the input items for the registered authentication server have been entered correctly.
Note
You can only set one authentication server (Active Directory server) to be used with SMB. If no server is set, authentication is performed based on the NAS Access User Settings.
For operations with an Active Directory server, be sure to set up a DNS server for domain name resolutions. Refer to "2.3 Setting Up Virtual Appliances" for details.
For operations with an Active Directory server, be sure to synchronize the clock between this product and the Active Directory server. It is recommended that you perform automatic clock calibration via NTP. Refer to "2.3 Setting Up Virtual Appliances" or "2.5.1 Setting the System Clock" for details.
For operations that use an Active Directory server, specify a user that belongs to the "Domain Admins" group for the bind user.
If an authentication server is registered, modified, or deleted, NAS access to the current shared folder is suspended. Confirm that there is no NAS access before performing an operation.
When specifying the user name (the owner name) and the group name for setting a shared folder and accessing from a client, append the domain name to them.
When performing a test of the authentication server or when accessing the NAS from a client, specify the username using one of the following formats:
User logon name (username@domain)
User logon name (pre-Windows 2000) (workgroup\username)
Input Items
When setting up an SMB authentication server
Item | Required? | Description |
---|---|---|
IP address | Required | Specify the IP address of the Active Directory authentication server. |
Domain | Required | Specify the domain name. |
Bind user | Required | Specify a bind user using one of the following formats: |
Password | Required | Specify the bind user password for Active Directory authentication. |
Description | Optional | Enter a description. |
See
You can also register an authentication server with the CSG REST API. Refer to "NAS Authentication Server" in the "Reference Guide" for details on the registration process.