Dell DX6000 Administration Manual

Also see for DX6000: Manual Supplementary guide Hardware installation instructions Hardware owner's manual Application guide

Contents

Copyright © 2010 Caringo, Inc.All rights reserved 18Version 5.0December 2010Option DescriptionDomain naming rules are discussed in Section 4.5, “DomainNaming Rules”.Renaming an existing domain is supported only using the AdminConsole.Protection Setting All protection settings enable domain managers to maintain theirown user list and the domain user list. The difference betweenprotection settings is which realms can POST to the domain (thatis, create buckets).Click one of the following:• All Users. No authentication required: Any user can createbuckets in the domain without authenticating. Domain managerscontrol their own user list and the domain user list. Applicationdevelopers can enforce security on objects and buckets.• Only users in this domain: Enables users in this domain topost to the domain.• Only users in domain: Enables users in the specified domain topost to this domain.Each protection settings is specified as a Castor-Authorization header in the form: Castor-Authorization:domain-name/_administrators, post=domain-name,where domain-name is blank if you choose the "all users"protection setting.For more information about the Castor-Authorization header,see the DX Object Storage Application Guide.Domain Managers Domain managers have the ability to manage their own user listand user lists in the tenant's domain.To add a new administrator, click Add Domain Manager.To edit an existing manager, click Edit next to the administrator'smanager.Note: Domain manager names can consist of ASCII charactersonly and cannot include a colon character (:).NoteIf Custom Policy displays for Protection Setting, a tenant administrator has alteredthe Castor-Authorization header for the _administrators bucket. If you aretrying to troubleshoot an issue with users being able to access objects in a domain, trysetting the protection setting back to its default. Examples of modifying the Castor-Authorization header are shown in Section 4.7.1.3, “Using Override to ResolveAuthorization Specification Issues”.6. If you are adding or editing a domain manager, enter or edit the following information: