Installation manual

Preparing for CIFS Authentication
Adding an Active-Directory Forest (Kerberos)
3-22 CLI Storage-Management Guide
For example:
bstnA6k(gbl)# show active-directory domain MA.NE.MEDARCH.ORG
Active Directory Domains
------------------------
Forest Name: medarcv
Domain Name Domain Type IP Address Service
----------------------------------- ------------- ------------- ----------
MEDARCH.ORG forest-root 192.168.25.104 DNS
MA.NE.MEDARCH.ORG child-domain 192.168.25.103 KDC
Forest Trust
------------
Forest-1 Forest-2 Trust Type
----------------------------------- ----------------------------------- ----------
ny.com vt.com bidirectional
bstnA6k(gbl)# ...
Showing DC Status
Use the show active-directory status command to see the status of the AD forest’s DCs
and all forest-to-forest trusts:
show active-directory status [forest forest-name | domain
domain-name]
where you can use either of the options to focus on a single domain or forest:
forest forest-name (optional, 1-256 characters) shows one forest, or
domain domain-name (optional, 1-256 characters) focuses on one domain.
For domains with multiple DCs, each ARX processor makes independent decisions
about which DC is active. On an ARX®6000, the output shows the status for the
SCM processor (1.1) as well as all ASM processors. The SCM processor performs the
domain-join operation for an ARX-CIFS service (described in a later chapter about
CIFS services), and the ASM processors perform all client authentications. The
smaller ARX®500 and ARX®1000 platforms have a single ASM processor that
performs both functions. The output of this command shows separate status tables for
each processor.