Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell PowerStore Configuring Multiprotocol File Sharing

PDF

Windows credential for SMB requests

A Windows credential must be used to handle SMB requests for an SMB-only or a multiprotocol file system with a Windows or native access policy. The Windows credential for SMB is built only once at the session setup request time when the user connects.

With Kerberos authentication, the credential of the user is a part of the Kerberos ticket of the session setup request, unlike when using NT LAN Manager (NTLM). Other information is queried from the Windows DC or the LGDB. For Kerberos, the list of extra group SIDs is taken from the Kerberos ticket and the list of extra local group SIDs. The list of privileges are taken from the LGDB. For NTLM, the list of extra group SIDs is taken from the Windows DC and the list of extra local group SIDs. The list of privileges is taken from the LGDB.

The corresponding UID and primary GID are also retrieved from the user-mapping component. Since the primary group SID is not used for access checking, the UNIX primary GID is used instead.

NOTE:NTLM is an older suite of proprietary security protocols that provides authentication, integrity, and confidentiality to users. Kerberos is an open standard protocol that provides faster authentication by using a ticketing system. Kerberos adds greater security than NTLM to systems on a network.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\