Installation manual

CLI Storage-Management Guide 3-1
Chapter 3
Preparing for CIFS Authentication
The ARX is a file proxy between clients and back-end filers; it must authenticate
clients on the front end, and it must provide valid credentials to servers on the back
end. To set up the switch proxy in an CIFS environment, you must configure two sets
of authentication parameters in advance:
•A proxy user, configured with a valid username and password.
The switch uses the proxy-user credentials when it performs autonomous
operations (such as moving files between shares).
• (NTLM only) A mechanism to facilitate client authentication. This is typically an
external NTLM-Authentication server, the host machine for the
separately-installed NTLM Secure Agent software.
• (Kerberos only) The structure of the Active-Directory forest in your network.
This identifies the Domain Controllers (DCs) for each Windows domain, and it
provides the ARX with the Windows-domain hierarchy.
You must configure these Windows-security parameters first so that you can reference
them later.
You can also define the permissions for a group of CIFS clients to use
Windows-Management applications, such as the MicroSoft Management Console
(MMC), in CIFS namespaces. You can create one or many such
management-authorization groups. You can later assign each group to one or more
CIFS namespaces.