Hitachi VSP Gx00 series

■
Windo
ws Server 2012 R2
Prerequisite software
■
Active Directory
Authentication protocol for user for searching
■
LDAP v3 simple bind
Note:
When using an LD
AP server or a Kerberos server as an authentication server,
and combining it with an authorization server, use the same host for the
authentication and authorization servers.
When a RADIUS server is used as an authentication server, two
authentication servers (one primary and one secondary) can be specied, but
only one authorization server can be specied.
Connecting two authentication servers
T
wo authentication servers can be connected to a storage system. When the servers are
connected, the server congurations must be the same, except for the IP address and
the port.
If you sear
ch for a server using information registered in the SRV records in the DNS
server, conrm that the following conditions are satised:
Note: For RADIUS servers, you cannot use the SRV r
ecords.
LDAP server conditions:
■
The envir
onmental setting for the DNS server is completed at the LDAP server.
■
The host name, the port number, and the domain name of the LDAP server are
registered in the DNS server.
Kerberos server conditions:
■
The host name, the port number, and the domain name of the Kerberos server
are registered in the DNS server.
Because UDP/IP is used to access the RADIUS server, no encrypted communications are
available, such as negotiations between pr
ocesses. To access the RADIUS server in a
secure environment, encryption in the packet level is required, such as IPsec.
Connecting authentication and authorization servers
To use an authentication server and an authorization server, you must create
conguration les and congure your network. Detailed setting information is required
for the authentication server and the authorization server, especially for creating a
conguration le.
Connecting two authentication servers
Chapter 5: Setting up security
System Administrator Guide for VSP Gx00 models and VSP Fx00 models 159