10400455-002
©2008-14 Overland Storage, Inc.
63
SnapScale/RAINcloudOS 4.1 Administrator’s Guide
4 – Network Settings
Kerberos Authentication
Kerberos is a secure method for authenticating a request for a service in a network. Kerberos
lets a user request an encrypted “ticket” from an authentication process that can then be used
to request a service from a server or cluster. The user credentials are always encrypted before
they are transmitted over the network.
The SnapScale cluster supports the Microsoft Windows implementation of Kerberos. In
Windows ADS, the domain controller is also the directory server, the Kerberos Key
Distribution Center (KDC), and the origin of group policies that are applied to the domain.
NOTE: Kerberos requires the cluster’s time to be closely synchronized to the domain controller’s
time. This means that (1) the cluster automatically synchronizes its time to the domain
controller's and (2) NTP cannot be enabled when joined to an ADS domain.
Interoperability with Active Directory Authentication
The SnapScale supports the Microsoft Windows family of servers that run in ADS mode. Any
SnapScale cluster can join Active Directory domains as a member server. References to the
SnapScale shares can be added to organizational units (OU) as shared folder objects.
NOTE: Windows 2000 domain controllers must run SP2 or later.
Guest Account Access to the SnapScale cluster
The
Network > Windows/SMB
page in the Web Management Interface contains an option that
allows unknown users to access the SnapScale cluster using the guest account.
Connect from a Windows Client
Windows clients can connect to the SnapScale using either the cluster name or any IP address
in the node IP address pool. However, if possible, clients should use the cluster name to benefit
from round robin DNS resolution (see
Configure the DNS for Name Resolution and Round
Robin Load Distribution on page 56
).
To navigate to the cluster using Windows Explorer, use one of these procedures:
•
For Microsoft Windows Vista, 2008, and 7 clients, navigate to
Network >
server_name
.
•
For Microsoft Windows XP, 2000, or 2003 clients, navigate to
My Network Places >
workgroup_name > server_name
.
Active Directory
Service (ADS)
When operating in a Windows Active Directory domain environment,
the SnapScale is a member of the domain and the domain
controller is the repository of all account information. Client
machines are also members of the domain and users log into the
domain through their Windows-based client machines. Active
Directory domains resolve user authentication and group
membership through the domain controller.
Once joined to a Windows Active Directory domain, the SnapScale
cluster imports and then maintains a current list of the users and
groups on the domain. Thus, you must use the domain controller to
make modifications to user or group accounts. Changes you make
on the domain controller appear automatically on the SnapScale
cluster.
NOTE: Windows 2000 domain controllers must run SP2 or later.
Option
Description
