Adaptec 5325301638 Administration Guide - Page 40

Support for Microsoft Name Resolution Servers, Interoperability with Active Directory Authentication

Page 40 highlights

Windows Workgroup or Domain Windows Networking Options Windows networks use a domain controller to store user credentials. The domain controller can validate all authentication requests on behalf of other systems in the domain. Option Workgroup Domain (NT or ADS) Description In a workgroup environment, users and groups are stored and managed separately on each server in the workgroup. When operating in a Windows NT or Active Directory domain environment, the Snap Server is a member of the domain and the domain controller is the repository of all account information. Client machines are also members of the domain and users log into the domain through their Windows-based client machines. Windows or Active Directory domains resolve user authentication and group membership through the domain controller. Once joined to a Windows NT or Active Directory domain, the Snap Server imports and then maintains a current list of the users and groups on the domain. Thus, you must use the domain controller to make modifications to user or group accounts. Changes you make on the domain controller appear automatically on the Snap Server. Kerberos Authentication Kerberos is a secure method for authenticating a request for a service in a network. Kerberos lets a user request an encrypted "ticket" from an authentication process that can then be used to request a service from a server. The user credentials are always encrypted before they are transmitted over the network. The Snap Server supports the Microsoft Windows implementation of Kerberos. In Windows 2000/2003/XP, the domain controller is also the directory server, the Kerberos key distribution center (KDC), and the origin of group policies that are applied to the domain. Support for Microsoft Name Resolution Servers The Snap Server supports both Microsoft name resolution services: Windows Internet Naming Service (WINS) and Dynamic Domain Name Server (DNS). However, when you use a dynamic domain server or a domain name server with an ADS server, make sure the forward and reverse name lookup is correctly set up. Interoperability with Active Directory Authentication The Snap Server supports the Microsoft Windows 2000 family of servers that run in native ADS mode or in mixed NT/ADS mode. Snap Servers can join Active 26 Snap Server Administrator Guide

  • 1
  • 2
  • 3
  • 4
  • 5
  • 6
  • 7
  • 8
  • 9
  • 10
  • 11
  • 12
  • 13
  • 14
  • 15
  • 16
  • 17
  • 18
  • 19
  • 20
  • 21
  • 22
  • 23
  • 24
  • 25
  • 26
  • 27
  • 28
  • 29
  • 30
  • 31
  • 32
  • 33
  • 34
  • 35
  • 36
  • 37
  • 38
  • 39
  • 40
  • 41
  • 42
  • 43
  • 44
  • 45
  • 46
  • 47
  • 48
  • 49
  • 50
  • 51
  • 52
  • 53
  • 54
  • 55
  • 56
  • 57
  • 58
  • 59
  • 60
  • 61
  • 62
  • 63
  • 64
  • 65
  • 66
  • 67
  • 68
  • 69
  • 70
  • 71
  • 72
  • 73
  • 74
  • 75
  • 76
  • 77
  • 78
  • 79
  • 80
  • 81
  • 82
  • 83
  • 84
  • 85
  • 86
  • 87
  • 88
  • 89
  • 90
  • 91
  • 92
  • 93
  • 94
  • 95
  • 96
  • 97
  • 98
  • 99
  • 100
  • 101
  • 102
  • 103
  • 104
  • 105
  • 106
  • 107
  • 108
  • 109
  • 110
  • 111
  • 112
  • 113
  • 114
  • 115
  • 116
  • 117
  • 118
  • 119
  • 120
  • 121
  • 122
  • 123
  • 124
  • 125
  • 126
  • 127
  • 128
  • 129
  • 130
  • 131
  • 132
  • 133
  • 134
  • 135
  • 136
  • 137
  • 138
  • 139
  • 140
  • 141
  • 142
  • 143
  • 144
  • 145
  • 146
  • 147
  • 148

Windows Workgroup or Domain
26
Snap Server Administrator Guide
Windows Networking Options
Windows networks use a domain controller to store user credentials. The domain
controller can validate all authentication requests on behalf of other systems in the
domain.
Kerberos Authentication
Kerberos is a secure method for authenticating a request for a service in a network.
Kerberos lets a user request an encrypted "ticket" from an authentication process
that can then be used to request a service from a server. The user credentials are
always encrypted before they are transmitted over the network.
The Snap Server supports the Microsoft Windows implementation of Kerberos. In
Windows 2000/2003/XP, the domain controller is also the directory server, the
Kerberos key distribution center (KDC), and the origin of group policies that are
applied to the domain.
Support for Microsoft Name Resolution Servers
The Snap Server supports both Microsoft name resolution services: Windows
Internet Naming Service (WINS) and Dynamic Domain Name Server (DNS).
However, when you use a dynamic domain server or a domain name server with an
ADS server, make sure the forward and reverse name lookup is correctly set up.
Interoperability with Active Directory Authentication
The Snap Server supports the Microsoft Windows 2000 family of servers that run in
native ADS mode or in mixed NT/ADS mode. Snap Servers can join Active
Option
Description
Workgroup
In a workgroup environment, users and groups are stored and
managed separately on each server in the workgroup.
Domain
(NT or ADS)
When operating in a Windows NT or Active Directory domain
environment, the Snap Server is a member of the domain and the
domain controller is the repository of all account information. Client
machines are also members of the domain and users log into the
domain through their Windows-based client machines. Windows or
Active Directory domains resolve user authentication and group
membership through the domain controller.
Once joined to a Windows NT or Active Directory domain, the Snap
Server imports and then maintains a current list of the users and
groups on the domain. Thus, you must use the domain controller to
make modifications to user or group accounts. Changes you make
on the domain controller appear automatically on the Snap Server.