Administrator Guide

9. Select whether to use the default port for the selected protocol, or specify a dierent port.
10. Type the Base DN for the Active Directory server, or select Get Default to use the default value. The Base DN can be up to
254 ASCII characters.
11. Select whether to use anonymous connections to the server or type a Bind DN.
12. If a Bind DN is specied, type the Bind password. Passwords can be up to 63 ASCII characters.
13. To test the new Active Directory settings, click the Test AD settings button. Group Manager tests the Active Directory settings
for all servers. If authentication fails, a dialog box opens, listing the Active Directory servers with which connections could not
be established. If no connections can be established, you can accept the conguration as is or click Cancel and check the
Active Directory settings again.
14. Click OK.
Modify Active Directory Accounts and Groups
When you modify Active Directory accounts and groups, the following restrictions apply:
• You cannot change the account name. Instead, you must delete the account and then add it back with the updated name in
Active Directory.
• You cannot modify cached accounts. You can only view their conguration details.
• You cannot change the account type. Instead, you must delete the account and recreate it with the desired account type.
When you modify Active Directory groups, the following considerations apply:
• An Active Directory security/distribution group is added to the PS Series group with the attribute that all members of the AD
group now have access. If changes are made to any members of the group, the changes are automatically integrated the next
time the members log in to the group.
– When a new user is added to the Active Directory group, the user automatically has access to the group.
– When an Active Directory user is removed from the AD group, the user no longer has access to the group.
– When the user name of a current member of the AD group is modied in Active Directory, no changes need to be made for
that user on the PS Series group.
• When you change the name of the Active Directory group, the group must be deleted from the PS Series group and then re-
added with the new name.
To change an Active Directory account or group:
1. Click Group → Group Conguration.
2. Click the Administration tab.
3. In the Accounts and Groups panel, select either:
• All accounts and groups to view both local and remote accounts.
• Active Directory users to view only Active Directory user accounts.
• Active Directory groups to view only Active Directory group accounts.
4. Select the account and click Modify. The Modify Administration Account dialog box opens.
In the dialog box, use the Account type section to change attributes of the account type:
• If the account type is Pool administrator or Volume administrator, you can use the Pool access section to specify the pools
to which the account has access and the storage quota for the account.
• If the account type is Pool administrator, you can use the Additional access section to give the account read-only access to
the entire group.
You can also grant read-only accounts permission to save diagnostics and save cong from this dialog box.
5. To change replication partners for a volume administrator, click the Replication Partners tab and change the selections.
NOTE: Only users with group administrator privileges can modify the NAS container replication conguration.
6. Click OK.
Test the Active Directory Server
After you have added the Active Directory server, test your connection by clicking Test AD settings. The rmware tests all of the
Active Directory servers in the list and reports the results of each connection attempt.
About Group-Level Security
65