PLANET NAS-3410 - Manual (Page 58)

56
Chapter 8
User Access
The NAS-3410 fits into the network environment as soon as it is properly configured. This chapter
describes how to get the NAS-3410 ready for user accesses from various network OS.
Before reading on, please make sure that the NAS-3410 is configured with an IP address and a
volume is created successfully. For the rest of the sections, we assume that the server name is
NASSERVER, the IP address is 192.168.170.172 and there is a volume named volume01.
8.1 Workgroup or Domain Mode
The NAS-3410 can work in either the workgroup mode or the domain mode. In the workgroup
mode, the administrator creates accounts for the NAS-3410 and maintains the user database per
server. User authentication is done by checking the local user accounts. In the domain mode, the
NAS-3410 can retrieve user names from the domain controller and rely on the domain controller
to authenticate users. It can also authenticate users by local accounts.
In the domain mode, when a Windows user requests to access a shared folder, the user will be
authenticated with the domain accounts first, then the local accounts. If the user is assigned with
proper access rights in the share permissions and the ACL settings, the user will be allowed to
access the shared folder.
For those using MacOS, web browsers or FTP to access the NAS-3410, the security control
mechanism is similar. If set to the workgroup mode, the NAS-3410 authenticates all users from
various network operating systems with local accounts only. If set to the domain mode, the
NAS-3410 can be configured to use different security policies for different network file protocols –
either authenticated by local accounts only, or by both local and domain accounts.
For example, the NAS-3410 can authenticate Windows users by querying the domain controller,
while at the same time check the MacOS users with local user accounts. The administrator can
set the SMB/CIFS protocol to the domain mode and configure the AFP protocol to apply Local
account authentication.
8.2 Accessing from Windows OS
There are some configuration jobs to do before Windows users can access the NAS-3410. Please
enter the administration homepage first.