Administrator Guide

26
FluidFS Account Management and Authentication
This section contains information about managing FluidFS cluster accounts and authentication. These tasks are performed using the
Dell Storage Manager Client.
Account Management and Authentication
FluidFS clusters include two types of access:
• Administrator-level access for FluidFS cluster management
• Client-level access to SMB shares, NFS exports, and FTP folder
Administrator accounts control administrator-level access. Users and groups control client-level access to SMB shares and NFS
exports.
The FluidFS cluster supports administrator-level and client-level authentication for both local and remote users and groups:
• Local users and groups – User and group identities dened and managed on and by the FluidFS system. Local management is
useful when you have only a limited number of users and groups. In addition, authentication does not depend on external servers.
• External users and groups – User and group identities dened and managed on and by an external repository. External
management is useful when managing access of many users and groups to many dierent resources, but depends on the
availability of the external database. FluidFS supports the following external identity repositories:
– Active Directory – Congure the FluidFS cluster to access an Active Directory database to authenticate Windows users.
NOTE: Active Directory can also be used as an LDAP database for UNIX/Linux users.
– NIS or LDAP – Congure the FluidFS cluster to access an NIS or LDAP database to authenticate UNIX and Linux users.
NOTE:
• Local and external users can be used simultaneously.
• If you congure Active Directory and either NIS or LDAP, you can set up mappings between the Windows users in Active
Directory and the UNIX and Linux users in LDAP or NIS to allow one set of credentials to be used for both types of data
access.
Default Administrative Accounts
The FluidFS cluster has the following built-in administrative accounts, each of which serves a particular purpose.
Login Name
Purpose SSH
Access
Enabled by
Default
SSH
Access
Allowed
VGA Console
Access
Enabled by
Default
VGA
Console
Access
Allowed
Default Password
Administrator FluidFS cluster
management (not a
UNIX or Linux user)
Yes Yes Yes Yes Stor@ge!
support FluidFS cluster
troubleshooting
(regular UNIX or Linux
user)
No Yes No Yes None (must be set
by Administrator)
FluidFS Account Management and Authentication
535