IBM 201 Giving storage access to Windows domain users and groups, Defining UNIX users and groups

6.Click OK. The new group name should appear in the list of group names.

7.Repeat Steps 1 on page 27 through 6 for each new local group you wish to add. If your storage is also going to be accessed by UNIX or UNIX-based clients and servers, continue with “Defining UNIX users and groups”. Otherwise, continue with “Creating shares” on page 32.

Giving storage access to Windows domain users and groups

You must first join the NAS 200 to the Windows domain. You may use the Windows 2000 for Network Attached Storage user interface to do this. Start the Windows

2000 for Network Attached Storage user interface, then do the following:

vClick Network.

vClick Identification.

vSelect the radio button labeled Domain, and specify the name of the domain being joined.

vSpecify a user name and password that can be used to log on to the domain.

vClick OK.

vShut down and restart the NAS 200.

Users and groups already defined in the domain can now be given access to any file shares that you create on the NAS 200. If you need to add new users and groups to the domain, consult the online documentation on the PDC for information on performing this procedure, or if you are not the administrator of the domain (PDC), contact the domain administrator to have the users and groups defined.

If your storage is also going to be accessed by UNIX or UNIX-based clients and servers, continue with “Defining UNIX users and groups”. Otherwise, continue with “Creating shares” on page 32.

Defining UNIX users and groups

This section describes how to set up UNIX users and groups who will access the NAS 200 storage via the Network File System (NFS) protocol.

Support for NFS is provided in the NAS 200 by a preloaded and preconfigured software component, Microsoft Services for UNIX. The levels of NFS supported by Services for UNIX, and in turn the NAS 200, are NFS Versions 2 and 3. Any client or server that is using an NFS software stack supporting NFS Version 2 or NFS Version 3, regardless of the operating system, should be able to connect to the NAS 200 and access its storage via NFS.

You administer NFS file shares and other attributes with standard Windows administration tools, including those provided as part of the IBM NAS desktop, and the Microsoft Windows 2000 for NAS user interface. Additional configuration of the User Name Mapping component of Services for UNIX, which maps the UNIX user name space to the Windows user name space, is required to support NFS security.

You can define a local UNIX name space on the NAS 200 by configuring the Server for PCNFS component of Services for UNIX. Alternately, you can point Services for UNIX to an existing Network Information Service (NIS) domain which defines the UNIX name space. In both cases, you will need to configure the User Name Mapping component to map the UNIX name space you select to the Windows name space, since file shares and individual file/directory permissions on the NAS 200 are defined in the context of the Windows name space.

28NAS 200 User’s Reference