Installation manual

Preparing for CIFS Authentication
Authorizing Windows-Management (MMC) Access
3-28 CLI Storage-Management Guide
Authorizing Windows-Management (MMC) Access
You can define a group of Windows clients and their authority to use
Windows-management applications, such as the MicroSoft Management Console
(MMC). This group can use MMC and similar applications to view or edit CIFS
shares, view and/or close open files, or view and/or close open client sessions. You
can apply a management-authorization group to any number of CIFS-supporting
namespaces (as described in a later chapter).
Use the
windows-mgmt-auth command to create a management-authorization group:
windows-mgmt-auth name
where name (1-64 characters) is a name you choose for the group.
This puts you into gbl-mgmt-auth mode, where you enter a list of Windows clients
and the management access for them. Once the configuration is finished, you can
apply it to any namespace in the clients’ Windows domain.
For example, the following command sequence creates a management-authorization
group called “readOnly:”
bstnA6k(gbl)# windows-mgmt-auth readOnly
bstnA6k(gbl-mgmt-auth[readOnly])# ...
Adding a Windows User to the Group
From gbl-mgmt-auth mode, use the user command to add one Windows client to the
current management-authorization group:
user name windows-domain domain
where
name (1-64 characters) is the name of a valid Windows client, and
domain (1-64 characters) is the client’s Windows domain.
You can add multiple users to the group; invoke this command once for each user.
For example, the following command sequence adds five users to the
management-authorization group, “readOnly:”