PLANET NAS-7450 - Manual (Page 63)

62
Chapter 7 User Access
The NAS server fits into the network environment as soon as it is properly configured. This
chapter describes how to get the NAS server ready for user access from various network OS.
Before reading on, please make sure that the NAS server is configured with an IP address and
a volume is created successfully. For the rest of the sections, we assume that the server name
is NAS SERVER, the IP address is 192.168.0.100 and there is a volume named volume01.
7.1 Workgroup or Domain Mode
The NAS server can work in either the workgroup mode or the domain mode. In the workgroup
mode, the administrator creates accounts for the NAS server and maintains the user database
per server. User authentication is done by checking the local user accounts. In the domain
mode, the NAS server can retrieve user names from the domain controller and rely on the
domain controller to authenticate users. It can also authenticate users by local accounts. In the
domain mode, when a Windows user requests to access a shared folder, the user will be
authenticated with the domain accounts first, then the local accounts. If the user is assigned
with proper access rights in the share permissions and the ACL settings, the user will be
allowed to access the shared folder. For those using MacOS, web browsers or FTP to access
the NAS server, the security control mechanism is similar. If set to the workgroup mode, the
NAS server authenticates all users from various network operating systems with local
accounts only. If set to the domain mode, the NAS server can be configured to use different
security policies for different network file protocols – either authenticated by local accounts
only, or by both local and domain accounts.
For example, the NAS server can authenticate Windows users by querying the domain
controller, while at the same time check the MacOS users with local user accounts. The
administrator can set the SMB/CIFS protocol to the domain mode and configure the AFP
protocol to apply Local account authentication.
7.2 Accessing from Windows
There are some configuration jobs to do before Windows users can access the NAS server.
Please enter the administration homepage first.