Dell EqualLogic PS6210XS EqualLogic Group Manager Administrator s Guide PS Ser - Page 65

9. Select whether to use the default port for the selected protocol, or specify a different port. 10. Type the Base DN for the Active Directory server, or select Get Default to use the default value. The Base DN can be up to 254 ASCII characters. 11. Select whether to use anonymous connections to the server or type a Bind DN. 12. If a Bind DN is specified, type the Bind password. Passwords can be up to 63 ASCII characters. 13. To test the new Active Directory settings, click the Test AD settings button. Group Manager tests the Active Directory settings for all servers. If authentication fails, a dialog box opens, listing the Active Directory servers with which connections could not be established. If no connections can be established, you can accept the configuration as is or click Cancel and check the Active Directory settings again. 14. Click OK. Modify Active Directory Accounts and Groups When you modify Active Directory accounts and groups, the following restrictions apply: • You cannot change the account name. Instead, you must delete the account and then add it back with the updated name in Active Directory. • You cannot modify cached accounts. You can only view their configuration details. • You cannot change the account type. Instead, you must delete the account and recreate it with the desired account type. When you modify Active Directory groups, the following considerations apply: • An Active Directory security/distribution group is added to the PS Series group with the attribute that all members of the AD group now have access. If changes are made to any members of the group, the changes are automatically integrated the next time the members log in to the group. - When a new user is added to the Active Directory group, the user automatically has access to the group. - When an Active Directory user is removed from the AD group, the user no longer has access to the group. - When the user name of a current member of the AD group is modified in Active Directory, no changes need to be made for that user on the PS Series group. • When you change the name of the Active Directory group, the group must be deleted from the PS Series group and then re- added with the new name. To change an Active Directory account or group: 1. Click Group → Group Configuration. 2. Click the Administration tab. 3. In the Accounts and Groups panel, select either: • All accounts and groups to view both local and remote accounts. • Active Directory users to view only Active Directory user accounts. • Active Directory groups to view only Active Directory group accounts. 4. Select the account and click Modify. The Modify Administration Account dialog box opens. In the dialog box, use the Account type section to change attributes of the account type: • If the account type is Pool administrator or Volume administrator, you can use the Pool access section to specify the pools to which the account has access and the storage quota for the account. • If the account type is Pool administrator, you can use the Additional access section to give the account read-only access to the entire group. You can also grant read-only accounts permission to save diagnostics and save config from this dialog box. 5. To change replication partners for a volume administrator, click the Replication Partners tab and change the selections. NOTE: Only users with group administrator privileges can modify the NAS container replication configuration. 6. Click OK. Test the Active Directory Server After you have added the Active Directory server, test your connection by clicking Test AD settings. The firmware tests all of the Active Directory servers in the list and reports the results of each connection attempt. About Group-Level Security 65