HP StoreOnce Backup User Manual
Page 39
NOTE:
The CIFS Server tab also shows the SMB Signing field. This feature improves security
at the protocol level and will be available in an upcoming release.
3.
Click Edit to modify the authentication settings.
Three authentication options provide different levels of security for CIFS NAS shares: None
(default), User, and AD (Windows Active Directory). Before configuring the settings, determine
the appropriate setting for the particular network and collect any additional information that
may be required to complete the configuration.
NOTE:
AD authentication joins the StoreOnce Backup system to an AD domain and is not
unique to NAS shares. It is also required when adding external users or external groups from
an AD domain to the StoreOnce Backup system, see
•
None (no authentication)
This provides a simple CIFS server configuration that allows for the creation of shares
with no authentication. Any user or computer can mount and access the shares created
on the HP StoreOnce Backup system with this setting.
•
User authentication
This provides a method of securing the CIFS shares to be accessed only by specified users
local to the CIFS Server. Once the server is configured to User mode, it is possible to
create new local users by selecting Create User. See
for more information.
•
Active Directory (AD) authentication
This allows the CIFS server to join a Windows Active Directory domain. Each node of a
StoreOnce couplet must connect to the same domain controller; only one AD domain
controller is allowed across a StoreOnce couplet. Access to individual CIFS shares is
managed from the Windows domain controller server which provides the names of domain
users and groups with access. See
Configuring CIFS Server with AD and CIFS Share with
for detailed instructions.
4.
Click Update. A popup window will advise that if you update the CIFS Server settings, any
backup or restore jobs in progress for it will fail.
5.
After reading the advisory, click Continue (or Cancel).
IMPORTANT:
Switching authentication modes in one service set impacts any backup or
restore jobs in progress on the other service set of the couplet. After the new authentication
mode is applied, HP recommends logging out and back into the Windows client where the
share is mounted to ensure the new authentication settings of the CIFS server are enforced.
Best practice is to configure authentication settings once only at installation or, if later, during
a maintenance window when no backup or restore jobs are running on the appliance.
6.
The system is now configured to create CIFS NAS shares. See
Creating a CIFS share (page 53)
.
CIFS Server tab
39