Skip to main content
Sign Out

Welcome to Dell

My Account
  • Place orders quickly and easily
  • View orders and track your shipping status
  • Enjoy members-only rewards and discounts
  • Create and access a list of your products
  • Manage your Dell EMC sites, products, and product-level contacts using Company Administration.
Sign In Create an Account Dell Financial Services Premier Sign In Partner Program Sign In
Contact Us

Your Dell.com Carts

Dell Storage Manager 2020 R1 Administrator's Guide

PDF

Enable Active Directory Authentication

Join the FluidFS cluster to an Active Directory domain to allow it to communicate with the directory service. By default, the FluidFS cluster uses the domain controller returned by Active Directory. Alternatively, you can designate a domain controller if you want to ensure that the FluidFS cluster uses a specific domain controller. Adding multiple domain controllers ensures continued authentication of users in the event of a domain controller failure. If the FluidFS cluster cannot establish contact with the preferred server, it will attempt to connect to the remaining servers in order.

Prerequisites

NAS administrators can join the FluidFS cluster to any organizational units inside an Active Directory domain.
  • An Active Directory directory service must be deployed in your environment.
  • The FluidFS cluster must have network connectivity to the directory service.
  • You must be familiar with the Active Directory configuration.
  • The FluidFS cluster requires credentials from an Active Directory account for the join operation. The join operation is the only time these credentials are required. They are not stored or cached by the FluidFS cluster.

    Use one of the following options for the account used to join the FluidFS cluster to the domain:

    • Use a Domain Admin account (preferred method).
    • Use an account that has been delegated the "join a computer to the domain" privilege, as well as being delegated full control over all computer objects in the domain.
    • If both of the previous options are unavailable, the minimum requirements for an account are as follows:
      • An Organizational Unit (OU) admin that has been delegated the "join a computer to the domain" privilege, as well as being delegated full control over objects within that OU, including computer objects.
      • Before joining the FluidFS cluster to the domain, a computer object must be created by the OU admin for the FluidFS cluster; privileges to administer are provided in the OU. The FluidFS cluster computer object name, and the NetBIOS name used when joining it, must match. When creating the FluidFS cluster computer object, in the User or Group field under permissions to join it to the domain, select the OU admin account. Then, the FluidFS cluster can be joined using the OU admin credentials.
  • FluidFS clusters need read access for the tokenGroups attribute for all users. The default configuration of Active Directory for all domain computers is to allow read access to the tokenGroups attribute. If the permission is not given, Active Directory domain users that are in nested groups or OUs encounter Access Denied errors, and users that are not in nested OUs or groups are permitted access.
  • The Active Directory server and the FluidFS cluster must use a common source of time.
  • You must configure the FluidFS cluster to use DNS. The DNS servers you specify must be the same DNS servers that your Active Directory domain controllers use.

Steps

  1. In the Storage view, select a FluidFS cluster.
  2. Click the File System tab.
  3. In the File System view, select Client Accessibility.
  4. Click the Directory Services tab.
  5. Click Edit Settings. The Edit Active Directory Settings dialog box opens.
  6. Select a domain controller from the Preferred Domain Controllers list, or enter a domain controller IP Address and click Add.
  7. Click OK.

Rate this content

Accurate
Useful
Easy to understand
Was this article helpful?
0/3000 characters
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please provide ratings (1-5 stars).
  Please select whether the article was helpful or not.
  Comments cannot contain these special characters: <>()\