Adaptec 5325301507 Administration Guide - Page 61

Local Users and Groups, Guidelines for Local Authentication

Page 61 highlights

Local Users and Groups • When the server automatically generates UIDs or GIDs for imported Windows domain users or groups, UIDs or GIDs that are already in use by local and NIS users will be skipped. • When NIS domain users and groups are imported, the SnapServer will discard any that are less than 101 or are in conflict with UIDs already in use by local or Windows domain users and groups. The NIS user ID 'nobody' (UID 65534) is reserved. It is not mappable to another ID, nor is another ID mappable to 'nobody'. GuardianOS offers ID Mapping, which allows mapping of Windows users to local or NIS users to provide unified permission assignments to users of different protocols. For more information on ID Mapping, please see "ID Mapping" on page 102. Local Users and Groups Local users or groups are created using the Security > Local Users and Security > Local Groups screens in the Administration Tool. Local users and groups are used for administrative and guest access to the server. Windows Workgroup, Macintosh, and FTP clients initially access the server using the guest account. If you require a higher degree of control over individual access to the file system for these clients, you must create local accounts (or, in the case of Windows, use Windows NT domain or Active Directory security). Guidelines for Local Authentication Duplicating Client Login Credentials for Local Users and Groups To simplify user access for Windows Workgroup or Macintosh clients, duplicate their login credentials on the SnapServer. That is, create local accounts on the SnapServer that match those used to log into client workstations. This strategy allows users to bypass the login procedure when accessing the SnapServer. Caution This strategy applies only to local users. Do not use duplicate domain user login credentials. Default Local Users and Groups The default local users and groups (see "Default User and Group Settings" on page 44) cannot be modified or deleted. Default users and groups admin, guest, and admingrp appear on the list of users or groups on the User or Group Management screens, but they cannot be deleted or modified. As you would expect, the default local users and groups do appear on the Share Access and Quotas screens. Chapter 3 User & Group Management 45

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148
  • 149
  • 150
  • 151
  • 152
  • 153
  • 154
  • 155
  • 156
  • 157
  • 158
  • 159
  • 160
  • 161
  • 162
  • 163
  • 164
  • 165
  • 166
  • 167
  • 168
  • 169
  • 170
  • 171
  • 172
  • 173
  • 174
  • 175
  • 176
  • 177
  • 178
  • 179
  • 180
  • 181
  • 182
  • 183
  • 184
  • 185
  • 186
  • 187
  • 188
  • 189
  • 190
  • 191
  • 192
  • 193
  • 194
  • 195
  • 196
  • 197
  • 198
  • 199
  • 200
  • 201
  • 202
  • 203
  • 204
  • 205
  • 206
  • 207
  • 208
  • 209
  • 210
  • 211
  • 212
  • 213
  • 214
  • 215
  • 216
  • 217
  • 218
  • 219
  • 220
  • 221
  • 222
  • 223
  • 224
  • 225
  • 226
  • 227
  • 228
  • 229
  • 230
  • 231
  • 232
  • 233
  • 234
  • 235
  • 236
  • 237
  • 238
  • 239
  • 240
  • 241
  • 242
  • 243
  • 244
  • 245
  • 246
  • 247
  • 248
  • 249
  • 250

Local Users and Groups
Chapter 3
User & Group Management
45
When the server automatically generates UIDs or GIDs for imported Windows
domain users or groups, UIDs or GIDs that are already in use by local and NIS
users will be skipped.
When NIS domain users and groups are imported, the SnapServer will discard
any that are less than 101 or are in conflict with UIDs already in use by local or
Windows domain users and groups.
The NIS user ID ‘nobody’ (UID 65534) is reserved. It is not mappable to another ID,
nor is another ID mappable to ‘nobody’.
GuardianOS offers ID Mapping, which allows mapping of Windows users to local
or NIS users to provide unified permission assignments to users of different
protocols. For more information on ID Mapping, please see “ID Mapping” on page
102.
Local Users and Groups
Local users or groups are created using the
Security > Local Users
and
Security >
Local Groups
screens in the Administration Tool. Local users and groups are used
for administrative and guest access to the server. Windows Workgroup, Macintosh,
and FTP clients initially access the server using the guest account. If you require a
higher degree of control over individual access to the file system for these clients,
you must create local accounts (or, in the case of Windows, use Windows NT
domain or Active Directory security).
Guidelines for Local Authentication
Duplicating Client Login Credentials for Local Users and Groups
To simplify user access for Windows Workgroup or Macintosh clients, duplicate
their login credentials on the SnapServer. That is, create local accounts on the
SnapServer that match those used to log into client workstations. This strategy
allows users to bypass the login procedure when accessing the SnapServer.
Caution
This strategy applies only to local users. Do not use duplicate domain user
login credentials.
Default Local Users and Groups
The default local users and groups (see “Default User and Group Settings” on page
44) cannot be modified or deleted. Default users and groups
admin
,
guest
, and
admingrp
appear on the list of users or groups on the User or Group Management
screens, but they cannot be deleted or modified. As you would expect, the default
local users and groups do appear on the Share Access and Quotas screens.