What are the limitations of workgroup mode, Does storedge support domain local groups – Sun Microsystems SUN STOREDGETM 5310 NAS User Manual
Page 149
Chapter 2
NAS Head
2-103
After you have successfully configured these settings, you will be able to publish
shares to ADS using the SMB/CIFS shares menu. Please refer to the FAQ “How do I
create SMB shares?” for details on this procedure.
This functionality is also available through the StorEdge Web Admin. This
functionality is also available through the StorEdge Web Admin.
1. To use the Web Admin, connect with a Web browser to http://<hostname or IP
address of your StorEdge>.
2. Click “Grant” or “Yes” to accept any Java software authorization windows and
you will reach the login screen.
3. Type the administrator password to access the administration interface.
4. Navigate to Windows Configuration/Configure Domains and Workgroups. All of
the above described settings can be configured therein.
What are the limitations of Workgroup mode?
Workgroup mode on theSun StorEdge 5310 NAS also implies use of what Microsoft
calls “Share-level Security.” In this mode, user tokens are not used, and ACL data
cannot be written or read. Resources are accessed as a particular UID/GID
combination assigned to each share. Shares are secured by password only, rather
than by a username/password combination.
Only NFS style permissions are possible. This mode is intended for only for use with
a small number of clients with very low security requirements, such as temporary
file transfer, or a small number of servers in a physically secure NFS environment. If
there is any requirement for security, or storage of individual user data, Windows
domain mode is strongly recommended.
Does StorEdge support Domain Local Groups?
No. StorEdge does not allow files and folders to be secured with local group
accounts, including Domain Local Groups. Only Domain Global groups are
supported.
Can StorEdge serve as a domain controller in a Windows Domain?
No. The primary purpose of StorEdge is to provide dedicated file service. We
provide pass-through authentication to existing domain controllers and Active
Directory servers.