Network and Storage Protocols

CIFS Multi Domain

henk_vonk

Hi,

I have a FAS3140 and this filer must act as a fileserver for two trusted Domains. Of course this filer has a CIFS license but no MultiStore license!!

The only information I could find on the NetApp site is something about the option cifs.search_domain. This option can be used to allow users from trusted domains to access the filer.

Could anyone provide me some extra information (or tell me where to look) about my current FAS3140 configuration (CIFS without MultiStore license) ?

Thanks. Henk

6 REPLIES 6

i3_nheusel

If there is a two-way transitive trust between the two domains I don't see what the big deal is (certainly, Multistore is overkill for this application).

The filer will act like any other Windows server with regard to domain SID resolution.  Pick a domain to host the filer, and use AD global groups & local groups to map users to resources across the trust as needed.

The cifs.search_domain option is only useful for prioritizing the domain search order.  If you leave it blank it will search all trusted domains for mapping usernames.  With only two domains this is not necessary.

marinkatic

If there is no domain trust, shouldn't it be possible to create locar users with identical names as domain users and then map those users to domain user names thus enabling access from another domain?

aborzenkov

You can’t map one CIFS user to another CIFS user. What you can is to let domain users connect resources as local users, but as already mentioned it quickly becomes rather unmanageable …

marinkatic

It is unmanageable for enterprise scenarios, but in Small Business with few than 100 users it could be cheaper then buying additional licenses.

i3_nheusel

Buying additional licenses for what?

peter_lehmann

How do you handle the password change of the user? It can work this way, but is "unmanagable"... IMO

Peter

Announcements
NetApp on Discord Image

We're on Discord, are you?

Live Chat, Watch Parties, and More!

Explore Banner

Meet Explore, NetApp’s digital sales platform

Engage digitally throughout the sales process, from product discovery to configuration, and handle all your post-purchase needs.

NetApp Insights to Action
I2A Banner
Public