Administrator Guide

10. (Optional) Select the Enabled checkbox to enable Kerberos authentication.
11. To change any of the Kerberos settings, clear the Auto-Discover checkbox, and then type a new value into that field.
● Kerberos Domain Realm: Kerberos domain realm to authenticate against. In Windows networks, this is the domain name
in uppercase characters.
● KDC Hostname or IP Address: Fully qualified domain name (FQDN) or IP address of the Key Distribution Center (KDC)
to which Storage Center will connect.
● Password Renew Rate (Days): Number of days before the keytab is regenerated. The default value is 0, which equates
to a password renew rate of 14 days.
12. Click Next.
The Join Domain page opens.
13. Type the user name and password of a domain administrator.
14. Click Next.
The Summary page opens.
15. If you want to change any setting, click Back to return to the previous page.
16. Click Finish.
17. Click OK.
Managing Directory Service Users
Directory service users can be individually granted access to a Storage Center.
NOTE: For user interface reference information, click Help.
Grant Access to a Directory User
Grant access to a directory user to allow the user to log in to the Storage Center using directory credentials.
Prerequisites
The Storage Center must be configured to authenticate users with an external directory service.
Steps
1. If the Storage Manager Client is connected to a Data Collector, select a Storage Center from the Storage view.
2. In the Summary tab, click Edit Settings.
The Edit Storage Center Settings dialog box opens.
3. Click the Users and User Groups tab.
4. On the Directory Users subtab, click Actions > Grant Access to Directory User.
The Grant Access to Directory User dialog box opens.
5. In the User Principal Name field, type the principal name for the directory user. The following formats are supported:
● username@domain
● domain\username
6. In the Distinguished Name field, type the distinguished name for the directory user.
For example: CN=Firstname Lastname,CN=Users,DC=example,DC=com
7. In the Real Name field, type the real name of the directory user.
8. From the Privilege drop-down menu, select the privilege level to assign to the user.
● Administrator: When selected, the user has full access to the Storage Center.
● Volume Manager: When selected, the user has read and write access to the folders associated with the assigned user
groups.
● Reporter: When selected, the user has read-only access to the folders associated with the assigned user groups.
9. From the Session Timeout drop-down menu, select the maximum length of time that the user can be idle while logged in to
the Storage Center before the connection is terminated.
10. (Volume Manager and Reporter only) Add one or more local user groups to the user.
a. In the Local User Groups area, click Change.
The Select Local User Groups dialog box opens.
Storage Center Maintenance
241