Domain user permissions on the Qumulo cluster
To create domain user permissions:
- Log on to the Qumulo Core web UI.
- Select the Cluster menu and click Active Directory under Authentication and Authorization.
- Configure the following mandatory fields:
Domain Name: Name of your domain. Example:
ad.example.com.Domain Username: The user account or service account you use to authenticate against the domain.
Domain Password: The password for the user account or service account.
- Optionally, configure the following two optional fields:
NetBIOS name: If your domain's NetBIOS name is different from your domain name, then enter the domain's NetBIOS name in this field.
Note:
If you attempt to join the domain and get an error message similar to this "Sorry, the NetBIOS name (QUMULO) is incorrect". Your domain's NetBIOS is different from your domain name.
Organizational Unit (OU): Obtained this information from your Systems Administrator. If unknown, leave it blank, and Qumulo attempts to join the domain without an OU specified.
- Click Yes to use your AD as your primary time server.
- Select the option to use Active Directory for POSIX attributes.
Use in environments where 'user objects' in Active Directory are assigned UNIX UID, and the GID attributes to allow the cluster to properly enforce permissions, regardless of the protocol used to access the data.
For additional details, see the Using Active Directory for POSIX attributes article.
- If desired, enter your Base DN(s) in the field provided.
- Click Join.