Dell PowerVault NX3600 Administrator's Manual

Also see for PowerVault NX3600: Manual Owner's manual Command line interface guide Supplementary guide Deployment guide

Contents

Dell PowerVault NX3600 Administrator's Manual Manual pdf 33 page image

This is the account that creates the folders (either using a user create script or manually) for each users homeshare.6. Disconnect or unmount the user share, and remount it as an account that has ownership of it, as previously set (asa Domain Admin, Storage Admin, or specific account ownership was set to).7. In the NAS Manager, create a new CIFS share, and select the share type CIFS share containing a user-baseddirectory tree.8. Previously, the general access share titled users was created at the path /users. In Path template, enter /users andthen select if you want the users folders to take the form of /users/username or /users/domain/username.9. Click Save Changes.10. Using Windows Explorer, for each user that you wish to be given a home share, create a folder for them thatconforms to the Path template: you selected in the previous step.This can be done manually or with a user create script.Setting Access Control Lists And Share Level Permissions OnFluidFSYou can set up access control lists (ACLs) and share level permissions (SLP) on Fluid File System (FluidFS). It isrecommended that a Windows administrator follows the best practices as defined by Microsoft.Both ACLs and SLPs are supported by FluidFS. However, SLPs are limited as they only address full control, modify andread rights for any given user or group.CIFS Storage Administrator AccountA built-in local CIFS storage administrator account serves the primary purpose of setting ownership of the CIFS share.The account can also be used to set ACLs when the NAS service is not joined to an Active Directory domain. This built-in account has a randomly generated password for security purposes. You must change this password beforeattempting to set any ACLs or SLPs.CIFS Full Access User Account (Backup User)The Full Access User account is a special purpose account that is to be used by backup administrators. The systemmust be a member of an Active Directory (AD) to associate this privilege with an AD account. The Full Access Userprivilege gives the AD account full access to all data on all shares, and all volumes, regardless of the file ACL definitions.However, the SLP settings do apply on the AD account granted Full Access User privilege. It is the job of the NASsystem administrator to verify the AD account set for full access user has all relevant SLPs.To manage the Full Access User:1. Open a connection to the CLI using a direct KVM connection or through SSH to the management VIP.2. To set the Full Access User account, or overwrite the current entry, in the CLI, run the command:system authentication full-access-account set DOMAIN+username3. To verify if Full Access User account is properly set, run the command:system authentication full-access-account view4. To delete the Full Access User, run the command:system authentication full-access-account deleteActive Directory ConfigurationFluidFS has the ability to join an Active Directory domain. This can be done using the NAS Manager or the CLI.33