Acopia Networks 810-0044-00 Installationshandbuch PDF herunterladen (Seite 56)

100

101

Preparing for CIFS Authentication

Adding an Active-Directory Forest (Kerberos)

3-12 CLI Storage-Management Guide

Use the no forest-root command to remove a DC for the forest root.

no forest-root domain-name domain-controller

where

domain-name (1-256 characters) identifies the AD domain of the forest root,

and

domain-controller is the IP address of the DC to remove.

For example, this command sequence removes the second (redundant) DC from the

‘medarcv’ forest root:

bstnA6k(gbl)# active-directory-forest medarcv

bstnA6k(gbl-forest[medarcv])# no forest-root MEDARCH.ORG 192.168.25.103

bstnA6k(gbl-forest[medarcv])# . . .

Identifying a Dynamic-DNS Server

Many Active-Directory networks use dynamic DNS to map CIFS host names to IP

addresses. Whenever an ARX’s front-end CIFS service changes its host name or IP

address, the service sends the hostname-to-IP mapping to one or more dynamic-DNS

servers in the AD forest. No manual changes to the DNS configuration are required.

Up-to-date DNS configuration is required for Kerberos, which uses FQDNs in its

authentication tickets instead of IP addresses.

RFCs 1034 and 1035 define basic DNS, and RFC 3645 defines the Microsoft-specific

authentication extensions for dynamic DNS. The ARX implementation supports all of

these standards; it does not support any other dynamic-DNS RFCs.

1 2 ... 51 52 53 54 55 56 57 58 59 60 61 ... 491 492

Kommentare zu diesen Handbüchern

Keine Kommentare

Acopia Networks 810-0044-00 Installationshandbuch Seite 56

Kommentare zu diesen Handbüchern