58
8. User Access
The NAS server fits into the network environment as soon as it is properly configured. This chapter
describes how to get the NAS server ready for user access from various network OS.
Before reading on, please make sure that the NAS server is configured with an IP address and a
volume is created successfully. For the rest of the sections, we assume that the server name is NAS
SERVER, the IP address is 192.168.170.172 and there is a volume named volume01.
8.1 Workgroup or Domain Mode
The NAS server can work in either the workgroup mode or the domain mode. In the workgroup mode,
the administrator creates accounts for the NAS server and maintains the user database per server.
User authentication is done by checking the local user accounts. In the domain mode, the NAS server
can retrieve user names from the domain controller and rely on the domain controller to authenticate
users. It can also authenticate users by local accounts. In the domain mode, when a Windows user
requests to access a shared folder, the user will be authenticated with the domain accounts first, then
the local accounts. If the user is assigned with proper access rights in the share permissions and the
ACL settings, the user will be allowed to access the shared folder. For those using MacOS, web
browsers or FTP to access the NAS server, the security control mechanism is similar. If set to the
workgroup mode, the NAS server authenticates all users from various network operating systems
with local accounts only. If set to the domain mode, the NAS server can be configured to use different
security policies for different network file protocols – either authenticated by local accounts only, or by
both local and domain accounts.
For example, the NAS server can authenticate Windows users by querying the domain controller,
while at the same time check the MacOS users with local user accounts. The administrator can set
the SMB/CIFS protocol to the domain mode and configure the AFP protocol to apply Local account
authentication.
8.2 Accessing from Windows
There are some configuration jobs to do before Windows users can access the NAS server. Please
enter the administration homepage first.
1. Please configure the NAS server to operate either in the workgroup mode or the domain mode. Go
to the Network→Windows menu and select either Workgroup Mode or Domain Mode. Also specify
the workgroup/domain name.
2. Create local accounts if the NAS server is in the workgroup mode. Go to the Security→Account
→Local Account page and use the Add User or Add Group button to create local accounts.
3. Get domain accounts from the domain controller if the NAS server is in the domain mode. Go to the
Security→Account→Domain Account page. Get domain user account for the domain controller.
To Next Page
Loading...
