How to add a domain?

Given that the Documentum ha environment involves two operating systems: Windows (CMS, xplore, etc.) and Linux (shared storage)

Here we will introduce how to add Windows Server to the domain and openfiler to the domain.

 

1. How to add Windows Server 2008 to a domain?

In Windows, adding a domain is relatively simple. Click 'my pcs'-> right-click 'properties' and select a domain in 'computer name, working group, and region, enter the domain name that has been set before and configure the IP address from the server DNS to the ad server.

Add the domain account to the Administrator group in windows and grant it administrator privileges.

After the domain settings are complete, restart. You can use the domain account to log on.

This operation is relatively simple and will not be repeated.

 

2. How to add openfiler to a domain?

NAS storage here, the openfiler Virtual Machine Used, describes how to add a domain in openfiler.

1. network and network access control settings

Click System in the main menu. In network configuration, change primary DNS: to the IP address of the domain controller. In this example, set 192.168.1.80 and hostname to openfiler. In network access configuration, add the IP address of the domain controller, as shown in.

2. Enable use Windows Domain Controller and authentication

Click Accounts in the main menu, select use Windows Domain Controller and authentication under standard view, and set according to the settings, where domain/Workgroup (enter the NetBIOS Name of the win2003 Domain Controller) and the ads realm (enter the win2003 Domain Controller Domain Name) must contain uppercase letters, the join domain must be checked for the first connection, and the administrator username and administrator password must be the valid Administrator and administrator password of the win2003 domain controller.

Click the submit button to enable ad authentication.

3. Users and user groups

Wait a moment. If the above settings are correct, you will see the user and user group information in the user list and group list, see.

3. Apply an ad account for access control

1. permission settings

Open Group access configuration, we can see many groups, scroll down the scroll bar on the right, find the Teachers Group, allow its RW, and click the update button.

2. connection test

The same as the LDAP permission, the network access configuration is still valid at this time. Computers outside the scope of the network access configuration cannot connect to openfiler. The connection test from the author's computer (192.168.1.1) is as follows.

Connect with the teacher1 or teacher account

Use the student1 or student2 account to connect. You cannot connect to student1 because you do not have any permissions.

Iii. openfiler account summary

Regardless of the account used by openfiler for access control, openfiler first checks from the IP address that the user is allowed to connect to openfiler. If not, the connection is immediately rejected; if the IP address allows connection, you can check from the account that the user has no connection permission. Whether the permission is read-only or read/write, or does not have any permissions.