Dell PowerFlex 4.5.x Administration Guide

SMB server

This section contains options for configuring a Windows server.

If you are configuring SMB with Kerberos security, you must select to Join to the Active Directory Domain.

If you select to Join to the Active Directory Domain, you must have added a DNS server. You can add a DNS server from the Naming Services card.

If the Windows Server Type is set to Join to the Active Directory Domain, then Enable automatic mapping for unmapped Windows accounts/users must be selected in the User Mapping tab.

NFS server

This section contains options for configuring an NFS, or NFS secure server for Linux or UNIX support.

You can configure Secure NFS when you create or modify a multiprotocol NAS server or one that supports Unix-only shares. Secure NFS provides Kerberos-based user authentication, which can provide network data integrity and network data privacy.

There are two methods for configuring Kerberos for secure NFS:

• Use the Kerberos realm (Windows realm) associated with the SMB domain configured on the NAS server, if any. If you configure secure NFS using this method, SMB support cannot be deleted from the NAS server while secure NFS is enabled and configured to use the Windows realm.

  This method of configuring secure NFS requires fewer steps than configuring a custom realm.

• Configure a custom realm to point to any type of Kerberos realm (AD, MIT, Heimdal). If you configure secure NFS using this method, you must upload the keytab file to the NAS server being defined.

FTP

FTP or Secure FTP can only be configured after a NAS server has been created.

FTP access can be authenticated using the same methods as NFS or SMB. Once authentication is complete, access is the same as SMB or NFS for security and permission purposes. The method of authentication that is used depends on the format of the username:

• If the format is domain@user or domain\user, SMB authentication is used. SMB authentication uses the Windows domain controller.
• For any other single username format, NFS authentication is used. NFS authentication uses local files, LDAP, NIS, or local files with LDAP or NIS. To use local files for NFS, FTP access, the passwd file must include an encrypted password for the users. This password is used for FTP access only. The passwd file uses the same format and syntax as a standard Unix system, so you can leverage this to generate the local passwd file. On a Unix system, use useradd to add a new user and passwd to set the password for that user. Then, copy the hashed password from the /etc/shadow file, add it to the second field in the /etc/passwd file, and upload the /etc/passwd file to the NAS server.

User mapping

If you are configuring a NAS server to support both types of protocols, SMB and NFS, you must configure the user mapping. When configured for both types of protocol, the user mapping requires that the NAS server is joined with an AD domain. You can configure the SMB server with AD from the SMB Server card.

If the Windows Server Type is set to Join to the Active Directory Domain, then you must select Enable automatic mapping for unmapped Windows accounts/users.